An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9250fdf5cb advisory.

    Update to version 4.0.6

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ce552d940 advisory.

    Update to version 4.0.6

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6092 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6092-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     January 01, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : smb4k     CVE ID         : CVE-2025-66002 CVE-2025-66003     Debian Bug     : 1122381

    Two vulnerabilities were discovered in smb4k, a KDE desktop utility     which allows unprivileged mounting of Samba/CIFS network shares, which     may result in local denial of service or local privilege escalation.

    For the stable distribution (trixie), these problems have been fixed in     version 4.0.0-1+deb13u1.

    We recommend that you upgrade your smb4k packages.

    For the detailed security status of smb4k please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/smb4k

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c32cb4b7-ddcb-11f0-902c-b42e991fc52e advisory.

    vulndb reports:
    A vulnerability, which was classified as critical, was               found in smb4k up to 4.0.4. Affected is some unknown               functionality of the component Mount Helper. The               manipulation with an unknown input leads to a access control               vulnerability. CWE is classifying the issue as CWE-284. The               product does not restrict or incorrectly restricts access to               a resource from an unauthorized actor. This is going to have               an impact on integrity, and availability.  The advisory is               available at seclists.org. The exploitability is told to be               easy. Local access is required to approach this attack. The               technical details are unknown and an exploit is not               available.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root     exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue     affects smb4k: from ? before 4.0.5. (CVE-2025-66003)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
307412	Fedora 43 : smb4k (2026-9250fdf5cb)	Nessus	Fedora Local Security Checks	high
307406	Fedora 42 : smb4k (2026-4ce552d940)	Nessus	Fedora Local Security Checks	high
281598	Debian dsa-6092 : smb4k - security update	Nessus	Debian Local Security Checks	high
279483	FreeBSD : smb4k -- Critical vulnerabilities in Mount Helper (c32cb4b7-ddcb-11f0-902c-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	high
278162	Linux Distros Unpatched Vulnerability : CVE-2025-66003	Nessus	Misc.	high

Detections

Analytics

CVE-2025-66003

high

Tenable Plugins

high

high

high

high

high