Incorrect authorization in FlightGear - CVE-2025-0781

Vulnerability identifier: #VU121635

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-0781

CWE-ID: CWE-863

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to incorrect permission checks. A remote attacker can trick the victim into loading a specially crafted Nasal script that bypassed sandboxing rules and allows an attacker to write to any file path that the user has permission to modify at the operating-system level

FlightGear
Ubuntu
Fedora
simgear (Ubuntu package)
SimGear
FlightGear

Install updates from vendor's website.

FlightGear - addressed in versions 2020.3.20 rc1, 2024.1.1 rc4
simgear (Ubuntu package) - addressed in versions 3.4.0-3ubuntu0.1~esm1, 1:2018.1.1+dfsg-1ubuntu0.1~esm1, 1:2019.1.1+dfsg-3ubuntu0.1~esm1, 1:2020.3.6+dfsg-1ubuntu0.1~esm2, 1:2020.3.18+dfsg-2.1ubuntu0.1~esm1
SimGear - addressed in versions 2020.3.19-7.fc40, 2020.3.19-7.fc41
FlightGear - addressed in versions 2020.3.19-8.fc40, 2020.3.19-8.fc41

• https://gitlab.com/flightgear/flightgear/-/commit/ad37afce28083fad7f79467b3ffdead753584358
• https://gitlab.com/flightgear/flightgear/-/issues/3025
• https://gitlab.com/flightgear/simgear/-/commit/5bb023647114267141a7610e8f1ca7d6f4f5a5a8

• Arbitrary file overwrite in FlightGear
• Ubuntu update for simgear
• Fedora 40 update for FlightGear, SimGear
• Fedora 41 update for FlightGear, SimGear