NetSight
high7.8

CVE-2025-49809

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable.

Impact

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.

Affected products

ProductAffected versions
Mtr
through 0.95

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References