CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It affects Linux.
CVE
CVE-2025-6018
Severity
HIGH
CVSS
7.8
EPSS
1.00%
Linux
Original NVD Description
A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.
Related CVEs
Other vulnerabilities affecting the same vendor(s)