Vulnerability in Opensuse Tumbleweed

CVE-2025-53881

A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.

EPSS: 0.002 (5.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References