Vulnerability Details CVE-2025-0620
A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.0%
CVSS Severity
CVSS v3 Score 6.6
References
Products affected by CVE-2025-0620
-
cpe:2.3:a:samba:samba:4.21.0
-
cpe:2.3:a:samba:samba:4.21.1
-
cpe:2.3:a:samba:samba:4.21.2
-
cpe:2.3:a:samba:samba:4.21.3
-
cpe:2.3:a:samba:samba:4.21.4
-
cpe:2.3:a:samba:samba:4.21.5