Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Rootio Linux: Unauthenticated Command Injection Possible

ROOT-OS-DEBIAN-13-CVE-2025-39854
Summary

The Rootio Linux package contains a vulnerability that could allow an attacker to execute unauthorized commands on the system without needing a password. This could lead to system compromise or data theft. Update to the latest version of Rootio Linux to fix this issue.

What to do
  • Update rootio-linux to version 6.12.63-1.root.io.64.
Affected software
VendorProductAffected versionsFix available
– rootio-linux <= 6.12.63-1.root.io.64 6.12.63-1.root.io.64
Original title
CVE-2025-39854 in rootio-linux - Patched by Root
Original description
Root has patched CVE-2025-39854 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available.
Published: 6 Mar 2026 · Updated: 6 Mar 2026 · First seen: 6 Mar 2026