CVE-2025-66004

Local privilege escalation in usbmuxd from arbitrary local user to usbmux

5.1 MediumFix available

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: Low

Exploit likelihood

0.15%Up 0.1 points since Dec 10, 2025

What each source reports

CVE List Score used 5.1

Local privilege escalation in usbmuxd from arbitrary local user to usbmux

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Record: CVE-2025-66004
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L
CVSS 3.1: 5.7 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
Weakness: CWE-35
Updated: 2026-11-02

EUVDEUVD-2025-202402 5.1

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Record: EUVD-2025-202402
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-vf6v-86gw-v5p3 5.1

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This...

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Record: GHSA-vf6v-86gw-v5p3
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 5.7 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
Weakness: CWE-35
Updated: 2026-11-02

NVD 5.1

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Record: CVE-2025-66004
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 5.7 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
Weakness: CWE-35
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-66004 5.1

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Record: DEBIAN-CVE-2025-66004
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated: 2026-11-02

OSVOESA-2025-2876 5.1

usbmuxd security update

usbmuxd is a socket daemon to multiplex connections from and to iOS devices.It allows multiple services on the device to be accessed simultaneously.

Security Fix(es):

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.(CVE-2025-66004)

Record: OESA-2025-2876
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated: 2026-11-02

Show 12 moreShow less

OSVOESA-2025-2877 5.1

usbmuxd security update

usbmuxd is a socket daemon to multiplex connections from and to iOS devices.It allows multiple services on the device to be accessed simultaneously.

Security Fix(es):

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.(CVE-2025-66004)

Record: OESA-2025-2877
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated: 2026-11-02

OSVOESA-2025-2878 5.1

usbmuxd security update

usbmuxd is a socket daemon to multiplex connections from and to iOS devices.It allows multiple services on the device to be accessed simultaneously.

Security Fix(es):

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.(CVE-2025-66004)

Record: OESA-2025-2878
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated: 2026-11-02

OSVOESA-2025-2879 5.1

usbmuxd security update

usbmuxd is a socket daemon to multiplex connections from and to iOS devices.It allows multiple services on the device to be accessed simultaneously.

Security Fix(es):

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.(CVE-2025-66004)

Record: OESA-2025-2879
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated: 2026-11-02

OSVOESA-2025-2880 5.1

usbmuxd security update

usbmuxd is a socket daemon to multiplex connections from and to iOS devices.It allows multiple services on the device to be accessed simultaneously.

Security Fix(es):

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.(CVE-2025-66004)

Record: OESA-2025-2880
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated: 2026-11-02

OSVOESA-2026-1556 5.1

usbmuxd security update

usbmuxd is a socket daemon to multiplex connections from and to iOS devices.It allows multiple services on the device to be accessed simultaneously.

Security Fix(es):

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.(CVE-2025-66004)

Record: OESA-2026-1556
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-66004 5.1

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Record: UBUNTU-CVE-2025-66004
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L
CVSS 3.1: 5.7 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
Updated: 2026-11-02

OSVAZL-72280 No score

CVE-2025-66004 affecting package usbmuxd 1.1.0-20

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Record: AZL-72280
Updated: 2026-11-02

OSVAZL-72290 No score

CVE-2025-66004 affecting package usbmuxd 1.1.1-1

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Record: AZL-72290
Updated: 2026-11-05

OSVMGASA-2026-0039 No score

Updated usbmuxd packages fix security vulnerability

Local privilege escalation in usbmuxd from arbitrary local user to usbmux. (CVE-2025-66004)

Record: MGASA-2026-0039
Updated: 2026-11-02

OSVSUSE-SU-2025:4435-1 No score

Security update for usbmuxd

This update for usbmuxd fixes the following issues:

CVE-2025-66004: Fixed LPE from nobody to usbmux (bsc#1254302)

Record: SUSE-SU-2025:4435-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0042-1 No score

Security update for usbmuxd

This update for usbmuxd fixes the following issues:

CVE-2025-66004: Fixed LPE from nobody to usbmux (bsc#1254302)

Record: SUSE-SU-2026:0042-1
Updated: 2026-11-02

OSVUSN-7929-1 No score

usbmuxd vulnerability

It was discovered that usbmuxd incorrectly handled certain paths received with the SavePairRecord command. A local attacker could possibly use this issue to delete and write files named *.plist in arbitrary locations.

Record: USN-7929-1
Updated: 2026-11-02

Affected products

libimobiledevice usbmuxd

Affected packages

Affected packages
Package	Affected	Fixed
`usbmuxd` Azure Linux:2	through 1.1.0-20	None known
`usbmuxd` Azure Linux:3	through 1.1.1-1	None known
`usbmuxd` Debian:12	before 1.1.1-2+deb12u1, plus listed versions 1.1.1-2	1.1.1-2+deb12u1
`usbmuxd` Debian:13	before 1.1.1-6+deb13u1, plus listed versions 1.1.1-6	1.1.1-6+deb13u1
`usbmuxd` Debian:14	before 1.1.1-7, plus listed versions 1.1.1-6	1.1.1-7
`usbmuxd` Debian:11	before 1.1.1-2+deb11u1, plus listed versions 1.1.1-2	1.1.1-2+deb11u1
`usbmuxd` Mageia:9	before 1.1.1-3.1.mga9	1.1.1-3.1.mga9
`usbmuxd` openEuler:24.03-LTS-SP1	before 1.1.1-5.oe2403sp1	1.1.1-5.oe2403sp1
`usbmuxd` openEuler:24.03-LTS-SP2	before 1.1.1-5.oe2403sp2	1.1.1-5.oe2403sp2
`usbmuxd` openEuler:22.03-LTS-SP3	before 1.1.1-5.oe2203sp3	1.1.1-5.oe2203sp3

Show 14 moreShow less

Affected packages
Package	Affected	Fixed
`usbmuxd` openEuler:22.03-LTS-SP4	before 1.1.1-5.oe2203sp4	1.1.1-5.oe2203sp4
`usbmuxd` openEuler:24.03-LTS	before 1.1.1-5.oe2403	1.1.1-5.oe2403
`usbmuxd` openEuler:20.03-LTS-SP4	before 1.1.0-17.oe2003sp4	1.1.0-17.oe2003sp4
`usbmuxd` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 1.1.0-14.3.1	1.1.0-14.3.1
`usbmuxd` SUSE:Linux Enterprise Module for Package Hub 15 SP7	before 1.1.1-150400.3.3.1	1.1.1-150400.3.3.1
`usbmuxd` SUSE:Linux Enterprise Workstation Extension 15 SP7	before 1.1.1-150400.3.3.1	1.1.1-150400.3.3.1
`usbmuxd` openSUSE:Leap 15.6	before 1.1.1-150400.3.3.1	1.1.1-150400.3.3.1
`usbmuxd` Ubuntu:16.04:LTS	All versions, plus listed versions 1.1.0-1build11.1.0-1build21.1.0-2	None known
`usbmuxd` Ubuntu:18.04:LTS	All versions, plus listed versions 1.1.0-2build11.1.0-2ubuntu0.1	None known
`usbmuxd` Ubuntu:20.04:LTS	All versions, plus listed versions 1.1.1~git20181007.f838cf6-11.1.1~git20191130.9af2b12-1	None known
`usbmuxd` Ubuntu:22.04:LTS	before 1.1.1-2ubuntu0.1, plus listed versions 1.1.1-2build11.1.1-2build2	1.1.1-2ubuntu0.1
`usbmuxd` Ubuntu:24.04:LTS	before 1.1.1-5~exp3ubuntu2.1, plus listed versions 1.1.1-3ubuntu11.1.1-5~exp3ubuntu11.1.1-5~exp3ubuntu2	1.1.1-5~exp3ubuntu2.1
`usbmuxd` Ubuntu:25.10	before 1.1.1-6ubuntu0.25.10.1, plus listed versions 1.1.1-6	1.1.1-6ubuntu0.25.10.1
`usbmuxd` Ubuntu:26.04:LTS	before 1.1.1-6ubuntu1, plus listed versions 1.1.1-61.1.1-6build1	1.1.1-6ubuntu1

History

History
Recorded	Changed	Sources
Nov 5, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-66004 is a medium vulnerability (CVSS 5.1) in Libimobiledevice Usbmuxd, published December 10, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in usbmuxd 1.1.1-2+deb12u1.

References

Show 15 moreShow less