{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://www.samba.org/","packageName":"samba","product":"","source":"CNA: redhat","vendor":"","versions":[{"lessThan":"4.21.6","status":"affected","version":"4.21.0","versionType":"semver"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"samba","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"samba","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"samba4","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"samba","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"samba","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"samba","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-8","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2025-0620","cwes":["CWE-552"],"description":"A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.","epss":{"date":"2026-11-05","percentile":0.56795,"score":0.00802},"exploits":[],"kev":null,"metrics":[{"score":4.9,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793889968798,"publishedAt":1749215407110,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2025-0620"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370453"},{"source":"CNA: redhat","tags":[],"url":"https://www.samba.org/samba/security/CVE-2025-0620.html"},{"source":"ADP: CVE","tags":[],"url":"http://www.openwall.com/lists/oss-security/2025/06/03/8"}],"remediation":[],"revision":"63f560090e1783ac14c44f5c0407bebd760d5b80c77c85cd02671743a6dacc89","sources":[{"modifiedAt":1793889968798,"name":"CNA: redhat","retrievedAt":1793891334380,"url":"https://www.cve.org/CVERecord?id=CVE-2025-0620"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793891365409,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-0620"}],"ssvc":{"assessedAt":1773866584010,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session","updatedAt":1793891365409}