What is CVE-2025-15576?

CVE-2025-15576 is a high-severity vulnerability in Freebsd, classified under Improper Privilege Management. CVSS score: 7.5/10. Published 2026-03-09.

How severe is CVE-2025-15576?

High severity. CVSS v3 base score is 7.5 out of 10.

Privilege escalation in Freebsd

CVE-2025-15576

If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root directories is an ancestor of the other, jailed processes may nonetheless be able to access a shared directory via a nullfs…

Vulnerability class: Privilege Escalation

EPSS: 0.001 (1.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N.

Affected products

Freebsd — versions 14.3, 13.5, 14.3-RELEASE

Weakness classification (CWE)

CWE-269 — Improper Privilege Management
CWE-488
CWE-790

References

secteam@freebsd.org (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-15576?: CVE-2025-15576 is a high-severity vulnerability in Freebsd, classified under Improper Privilege Management. CVSS score: 7.5/10. Published 2026-03-09.
How severe is CVE-2025-15576?: High severity. CVSS v3 base score is 7.5 out of 10.