Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Toolbox Security Update Fixes Privilege Escalation Risk

published 1 year ago

Summary

Red Hat Toolbox, a collection of system administration tools, has been updated to fix a security issue that could allow an attacker to gain elevated privileges on a system. This update is important for users who rely on Toolbox for system management tasks. To stay secure, apply the latest update to your Red Hat systems.

What to do

Update redhat toolbox to version 0:0.2-1.el10_0.
Update redhat toolbox-debuginfo to version 0:0.2-1.el10_0.
Update redhat toolbox-debugsource to version 0:0.2-1.el10_0.
Update redhat toolbox-tests to version 0:0.2-1.el10_0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:10.0	redhat	toolbox	< 0:0.2-1.el10_0 Fix: upgrade to 0:0.2-1.el10_0
Red Hat:enterprise_linux:10.0	redhat	toolbox-debuginfo	< 0:0.2-1.el10_0 Fix: upgrade to 0:0.2-1.el10_0
Red Hat:enterprise_linux:10.0	redhat	toolbox-debugsource	< 0:0.2-1.el10_0 Fix: upgrade to 0:0.2-1.el10_0
Red Hat:enterprise_linux:10.0	redhat	toolbox-tests	< 0:0.2-1.el10_0 Fix: upgrade to 0:0.2-1.el10_0

Original advisory text

Red Hat Security Advisory: toolbox security update

References

https://access.redhat.com/errata/RHSA-2025:13674 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2381794 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13674.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-23266 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-23266 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-23266 Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5659 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

9.0 Critical

Timeline

Published12 Aug 2025

Updated18 Jun 2026

First seen18 Jun 2026

Sources

RHSA-2025:13674 · OSV

Track software like this

Free during beta