Detections
Analytics
CVE-2025-49809
high
Description
mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.
References
https://github.com/traviscross/mtr/commit/5226f105f087c29d3cfad9f28000e7536af91ac6