Improper Permissions Vulnerability in Freedombox by Debian

CVE-2025-68462

What is CVE-2025-68462?

An improper permissions vulnerability exists in Freedombox prior to version 25.17.1, where the backups-data directory lacks appropriate access controls. This flaw allows unauthorized users to read sensitive database dump files, potentially leading to data exposure and security breaches. Ensuring the correct permission settings on the backups-data directory is critical for protecting user data.

References