An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6092 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6092-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     January 01, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : smb4k     CVE ID         : CVE-2025-66002 CVE-2025-66003     Debian Bug     : 1122381

    Two vulnerabilities were discovered in smb4k, a KDE desktop utility     which allows unprivileged mounting of Samba/CIFS network shares, which     may result in local denial of service or local privilege escalation.

    For the stable distribution (trixie), these problems have been fixed in     version 4.0.0-1+deb13u1.

    We recommend that you upgrade your smb4k packages.

    For the detailed security status of smb4k please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/smb4k

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c32cb4b7-ddcb-11f0-902c-b42e991fc52e advisory.

    vulndb reports:
    A vulnerability, which was classified as critical, was               found in smb4k up to 4.0.4. Affected is some unknown               functionality of the component Mount Helper. The               manipulation with an unknown input leads to a access control               vulnerability. CWE is classifying the issue as CWE-284. The               product does not restrict or incorrectly restricts access to               a resource from an unauthorized actor. This is going to have               an impact on integrity, and availability.  The advisory is               available at seclists.org. The exploitability is told to be               easy. Local access is required to approach this attack. The               technical details are unknown and an exploit is not               available.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows     local users ton perform arbitrary unmounts via smb4k mount helper (CVE-2025-66002)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
281598	Debian dsa-6092 : smb4k - security update	Nessus	Debian Local Security Checks	high
279483	FreeBSD : smb4k -- Critical vulnerabilities in Mount Helper (c32cb4b7-ddcb-11f0-902c-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	high
278165	Linux Distros Unpatched Vulnerability : CVE-2025-66002	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-66002

medium

Tenable Plugins

high

high

medium