OESA-2026-2598

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2598
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-2598.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-2598
Upstream
Published
2026-06-05T11:11:32Z
Modified
2026-08-18T01:20:03.463940884Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
nfs-utils security update
Details

This is he nfs-utils tools package. It contains the showmount,mount.nfs,umount.nfs and libnfsidmap

Security Fix(es):

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'rootsquash' or 'allsquash' attributes that would normally be expected to apply to that client.(CVE-2025-12801)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:24.03-LTS-SP3 / nfs-utils

Package

Name
nfs-utils
Purl
pkg:rpm/openEuler/nfs-utils&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.3-5.oe2403sp3

Ecosystem specific 

{
    "x86_64": [
        "libnfsidmap-2.6.3-5.oe2403sp3.x86_64.rpm",
        "nfs-utils-2.6.3-5.oe2403sp3.x86_64.rpm",
        "nfs-utils-debuginfo-2.6.3-5.oe2403sp3.x86_64.rpm",
        "nfs-utils-debugsource-2.6.3-5.oe2403sp3.x86_64.rpm",
        "nfs-utils-devel-2.6.3-5.oe2403sp3.x86_64.rpm",
        "nfs-utils-help-2.6.3-5.oe2403sp3.x86_64.rpm",
        "nfs-utils-min-2.6.3-5.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "libnfsidmap-2.6.3-5.oe2403sp3.aarch64.rpm",
        "nfs-utils-2.6.3-5.oe2403sp3.aarch64.rpm",
        "nfs-utils-debuginfo-2.6.3-5.oe2403sp3.aarch64.rpm",
        "nfs-utils-debugsource-2.6.3-5.oe2403sp3.aarch64.rpm",
        "nfs-utils-devel-2.6.3-5.oe2403sp3.aarch64.rpm",
        "nfs-utils-help-2.6.3-5.oe2403sp3.aarch64.rpm",
        "nfs-utils-min-2.6.3-5.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "nfs-utils-2.6.3-5.oe2403sp3.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2598.json"