CVE-2025-0620

CVE-2025-0620 · Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

CVSS 4.9 · Medium · EPSS 0.7% · Fix available

Published

2025-06-06T13:10:07.110Z

Updated

2026-08-31T11:28:18.247Z

Stack: system

Check your server →