CVE-2025-10230
Critical
Description
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
SeverityCritical
CVSS10.0
Exploit probability—
ProductSamba
PublishedNov 7, 2025
First seenNov 7, 2025
Weakness typeCWE-78OS command injection
How to fix
Update
- samba4.21.9, 4.21.5, 4.23.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | v < 4.21.9, 4.22.0 ≤ v < 4.21.5, 4.23.0 ≤ v < 4.23.2 | 4.21.9, 4.21.5, 4.23.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.