PT-2025-35551 · Opensuse+1 · Opensuse Tumbleweed+1

Johannes Segitz · Published 2025-09-02 · Updated 2025-09-26 · CVE-2025-46810

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions traefik2 versions prior to 2.11.29

Description A UNIX Symbolic Link (Symlink) Following vulnerability exists in the packaging of openSUSE Tumbleweed traefik2. This issue allows the traefik user to escalate to root privileges.

Recommendations Update traefik2 to version 2.11.29 or later.

Fix

Weakness Enumeration

CWE-61

Related Identifiers

CVE-2025-46810

OPENSUSE-SU-2025:15581-1

Affected Products

Opensuse Tumbleweed

Traefik2

References · 8

• https://osv.dev/vulnerability/openSUSE-SU-2025:15581-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46810 · Security Note
• https://twitter.com/VulmonFeeds/status/1962888244518965543 · Twitter Post
• https://bugzilla.suse.com/show_bug.cgi?id=1245204 · Note
• https://suse.com/security/cve/CVE-2025-46810 · Note
• https://t.me/CVEtracker/31496 · Telegram Post
• https://twitter.com/CVEnew/status/1962845623176003852 · Twitter Post
• https://t.me/cveNotify/134062 · Telegram Post