{"metadata": {"vulnerability": "cve-2025-52991", "count": 21, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-06-23T00:00:00Z", "date_only": false, "value": "2025-06-23T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-52991", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-52991", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-27T13:30:32.480Z", "date_only": false, "value": "2025-06-27T13:30:32.480Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2025-52991", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-27T14:15:00Z", "date_only": false, "value": "2025-06-27T14:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-52991", "record": "UBUNTU-CVE-2025-52991", "field": "published"}, {"timestamp": "2025-06-27T14:15:41Z", "date_only": false, "value": "2025-06-27T14:15:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8VH4-GPPM-M3JM", "record": "GHSA-8VH4-GPPM-M3JM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-27T14:15:41.253Z", "date_only": false, "value": "2025-06-27T14:15:41.253", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-52991", "record": "FKIE_CVE-2025-52991", "field": "published"}, {"timestamp": "2025-06-27T15:21:20.719Z", "date_only": false, "value": "2025-06-27T15:21:20.719431Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-52991", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-27T15:21:20.719Z", "date_only": false, "value": "2025-06-27T15:21:20.719431Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-52991", "record": "FKIE_CVE-2025-52991", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-27T15:31:25Z", "date_only": false, "value": "2025-06-27T15:31:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8VH4-GPPM-M3JM", "record": "GHSA-8VH4-GPPM-M3JM", "field": "published"}, {"timestamp": "2025-06-27T15:31:25Z", "date_only": false, "value": "2025-06-27T15:31:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8VH4-GPPM-M3JM", "record": "GHSA-8VH4-GPPM-M3JM", "field": "modified"}, {"timestamp": "2025-06-27T15:46:39.932Z", "date_only": false, "value": "2025-06-27T15:46:39.932Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-52991", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-27T15:46:39.932Z", "date_only": false, "value": "2025-06-27T15:46:39.932Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-52991", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-27T15:53:19Z", "date_only": false, "value": "2025-06-27T15:53:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19741", "record": "CVE-2025-52991", "field": "creation_timestamp", "uuid": "84203d3e-a76a-496f-96db-a2fc851fc67f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-52991\n\ud83d\udd25 CVSS Score: 3.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data manipulation. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.\n\ud83d\udccf Published: 2025-06-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-27T15:46:39.932Z\n\ud83d\udd17 References:\n1. https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017\n2. https://lix.systems/blog/2025-06-24-lix-cves/\n3. https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/\n4. https://security.snyk.io/vuln/?search=CVE-2025-52991\n5. https://security-tracker.debian.org/tracker/CVE-2025-52991\n6. https://labs.snyk.io", "url": "https://t.me/DarkWebInformer_CVEAlerts/19741"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-17T09:37:25.700Z", "date_only": false, "value": "2026-06-17T09:37:25.700", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-52991", "record": "FKIE_CVE-2025-52991", "field": "lastModified"}, {"timestamp": "2026-09-16T17:16:05Z", "date_only": false, "value": "2026-09-16T17:16:05Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-52991", "record": "UBUNTU-CVE-2025-52991", "field": "modified"}, {"timestamp": "2026-09-20T21:36:08Z", "date_only": false, "value": "2026-09-20T21:36:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:36:08Z", "date_only": false, "value": "2026-09-20T21:36:08Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.current_release_date"}]}