CVE-2025-52936: 
Linux Debian vulnerability analysis and mitigation

CVE-2025-52936 is an Improper Link Resolution Before File Access ('Link Following') vulnerability affecting yrutschle sslh versions before 2.2.2. The vulnerability was discovered and initially reported in June 2025, with the CVE record being created on June 23, 2025 by the Government Technology Agency of Singapore Cyber Security Group (GovTech CSG) (NVD, CVE).

The vulnerability is classified as CWE-59 (Improper Link Resolution Before File Access) and has received a CVSS 4.0 Base Score of 9.3 (CRITICAL) with the vector string CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/S:N/AU:Y/R:U/V:C/RE:M/U:Amber. This indicates a locally exploitable vulnerability with low attack complexity that requires low privileges and no user interaction (NVD, Wiz).

The vulnerability could allow an attacker to exploit improper link resolution before file access, potentially leading to unauthorized access or manipulation of files. Given the CVSS scoring, the vulnerability has high potential impact on both confidentiality and integrity, with some impact on availability (Wiz).

The vulnerability has been fixed in sslh version 2.2.2. Users are advised to upgrade to this version or later to mitigate the vulnerability (Github PR).