CVE-2025-54389

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-54389
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-54389.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-54389
Aliases
  • GHSA-522j-vvx9-gg28
Downstream
Related
Published
2025-08-14T15:53:42.393Z
Modified
2026-04-16T04:38:57.147046493Z
Severity
  • 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
AIDE improper output neutralization vulnerability
Details

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamper with the log output. A local user might exploit this to bypass the AIDE detection of malicious files. Additionally the output of extended attribute key names and symbolic links targets are also not properly neutralized. This issue has been patched in version 0.19.2. A workaround involves configuring AIDE to write the report output to a regular file, redirecting stdout to a regular file, or redirecting the log output written to stderr to a regular file.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54389.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-117"
    ]
}
References

Affected packages

Git / github.com/aide/aide

Affected ranges

Type
GIT
Repo
https://github.com/aide/aide
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
09bfeb7f91dacd9834f458f5712dfeac2606fc85

Affected versions

aide.*
aide.0.10.release
aide.0.11.rc1.release
aide.0.11.rc2.release
aide.0.11.rc3.release
aide.0.11.release
aide.0.11a.debian
aide.0.11b.nocurl
aide.0.12.rc1.release
aide.0.12.rc2.release
aide.0.12.release
aide.0.13.1.release
aide.0.13.rc1.release
aide.0.13.rc2.release
aide.0.13.release
aide.0.14.1.release
aide.0.14.2.release
aide.0.14.rc1.release
aide.0.14.rc2.release
aide.0.14.rc3.release
aide.0.14.release
aide.0.15.1.release
aide.0.15.rc1.release
aide.0.15.release
cs.*
cs.tut.fi.import
v0.*
v0.16
v0.16.1
v0.16.2
v0.16a1
v0.16a2
v0.16b1
v0.16rc1
v0.17
v0.17.1
v0.17.2
v0.17.3
v0.18
v0.19
v0.19.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-54389.json"