Arbitrary Code Execution Vulnerability in libnbd by Red Hat
CVE-2025-14946

4.8MEDIUM

Key Information:

Vendor: Red Hat
Status: Libnbd; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9
Vendor: CVE Published:; 19 December 2025

What is CVE-2025-14946?

A security flaw observed in libnbd could allow a malicious actor to exploit the software by persuading it to open a specially crafted Uniform Resource Identifier (URI). This vulnerability is particularly concerning as it involves non-standard hostnames that begin with '-o', which are mistakenly processed as arguments for the Secure Shell (SSH) process instead of legitimate hostnames. If exploited, this can result in the execution of arbitrary code with the same privileges as the user running the libnbd process.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch