CVE-2025-6018

High · CVSS 7.8

pam-config / Linux PAM (Pluggable Authentication Modules) — Local Privilege Escalation (LPE) via incorrect Polkit allow_active authorization (CWE-863 Incorrect Authorization)

CVSS: 7.8; nvd
EPSS: —
KEV: No
Class: other; CWE-863

Description

A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.

Search profile — drives PoC discovery

Symbols pam-configallow_activeallow_active yesPolkitPAMpam_loginuidpam_systemdSSH sessionconsole useractive sessionudisksorg.freedesktop.policykitpolkit-1

Keywords CVE-2025-6018pam-config LPEPAM Polkit allow_active privilege escalationpam-config SUSE privilege escalationLinux PAM local privilege escalation 2025Polkit allow_active SSH exploitpam-config polkit bypassSUSE pam udisks LPECWE-863 PAM polkit

Versions: SUSE Linux Enterprise 15 and related distributions shipping affected pam-config versions (advisory published 2025-06-17)

Ranked PoCs (25) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

tanjiti/sec_profile candidate

known researcher

trickest

★ 0
ibrahmsql/CVE-2025-6018 needs review

recent activity

gh_search · Python

★ 11
m4sh-wacker/CVE-2025-60188-Atarim-Plugin-Exploit needs review

gh_search · Python

★ 23
MichaelVenturella/CVE-2025-6018-6019-PoC needs review

gh_search · Shell

★ 17
muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit needs review

gh_search · Shell

★ 12
dreysanox/CVE-2025-6018_Poc needs review

gh_search · Python

★ 6
0rionCollector/Exploit-Chain-CVE-2025-6018-6019 needs review

gh_search · Shell

★ 4
DesertDemons/CVE-2025-6018-6019 needs review

gh_search · Shell

★ 4
Goultarde/CVE-2025-6018_CVE-2025-6019_autopwn needs review

gh_search · Shell

★ 4
AzureADTrent/CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation needs review

gh_search

★ 1
iamgithubber/CVE-2025-6018-19-exploit needs review

gh_search · Shell

★ 1
localh0ste/CVE-2025-6018-and-CVE-2025-6019 needs review

gh_search

★ 1
B1ack4sh/Blackash-CVE-2025-6018 needs review

trickest

★ 0
MaxKappa/opensuse-leap-privesc-exploit needs review

gh_search · Shell

★ 0
PuddinCat/GithubRepoSpider needs review

trickest

★ 0
e1arth/CVE-2025-6018 needs review

gh_search · Shell

★ 0
euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019 needs review

gh_search

★ 0
fkie-cad/nvd-json-data-feeds needs review

trickest

★ 0
iOxsec/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit needs review

gh_search · Shell

★ 0
matesz44/CVE-2025-6018-19 needs review

gh_search · Shell

★ 0
mistrust999/PAM-UDisks-PrivEsc-Metasploit needs review

trickest

★ 0
mistrustt/PAM-UDisks-PrivEsc-Metasploit needs review

trickest

★ 0
pawan-shivarkar/List-of-CVE-s- needs review

trickest

★ 0
pawan-shivarkar/pawan-shivarkar needs review

trickest

★ 0
sultanovich/sultanovich-scripts-collection needs review

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-06-30T12:00:22.000Z · profiled 2026-06-30T18:30:14.000Z