CVE-2025-4802: Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).

CSIRTS triage

What: An untrusted LD_LIBRARY_PATH environment variable allows arbitrary shared library loading in statically compiled setuid binaries.
Who is affected: Systems running GNU C Library versions 2.27 through 2.38 with setuid binaries using dlopen.
Urgency: High priority with a CVSS of 8.4; easily exploitable for privilege escalation and requires immediate patching.
Action: Upgrade GNU C Library to version 2.39 or later.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch C Library

Get an email when a new C Library advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2025-48020.56% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.

CVE	CSIRTS overview	External
CVE-2025-4802	coverage & exploitation status	NVD · CVE.org

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.