CVE-2025-49809 - CVE House
Back to Database
Status published High CVE-2025-49809

mtr through 0.95, in certain privileged contexts, mishandles execution of...

Vulnerability Description

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-49809

Credits & Attribution

No credits recorded in the NVD database.

References

More from mtr

View All →
CVE-2004-1224
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through...
Medium 4.6
CVE-2002-0497
Buffer overflow in mtr 0.46 and earlier, when installed setuid...
Low 2.1

Affected Vendor

Affected Software

mtr
Vulnerable Versions:
0

Timeline

Official Publish: July 4th, 2025
Last Modified: July 8th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-829

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.