CVE-2025-66446

Technical Details

MaxKB versions prior to 2.4.0 exhibit insecure file permissions on critical system files, including the dynamic linker (ld-linux.so). This vulnerability stems from insufficient access control mechanisms during the installation or configuration process. An attacker with local access or the ability to upload malicious files to specific locations can leverage these lax permissions to overwrite the existing dynamic linker with a malicious version. The dynamic linker is a crucial component responsible for loading shared libraries required by executable programs. By replacing it with a compromised version, the attacker can inject arbitrary code into any subsequently executed program, effectively gaining control of the system. The vulnerability lies in the fact that the default file permissions allow write access to users who should not have it, enabling the overwrite of these sensitive files. This overwrite can be achieved through various methods, including crafted scripts or malicious file uploads, depending on the specific deployment configuration of MaxKB.

The impact is significant because the dynamic linker is a fundamental part of the operating system's execution environment. Compromising it allows the attacker to intercept and modify the behavior of any program that relies on shared libraries, which is nearly every program on the system. This makes it a highly effective vector for privilege escalation and persistent system compromise.