{"action":"Upgrade ckermit to 416~beta12-1+deb13u1 or later.","affected":[{"fixed":"416~beta12-1+deb13u1","introduced":"0"}],"component":"ckermit","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["416~beta12-1+deb13u1"],"id":"tcs_01M5NPAV90Z1JP4DE331P18YRF","modified_at":"2026-10-08T10:00:25.628081567Z","published_at":"2025-12-24T22:15:43.550Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-68920","https://security-tracker.debian.org/tracker/CVE-2025-68920"],"severity":{"label":"high","score":8.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-68920#Debian:13/ckermit","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-68920"}],"summary":"C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary files from the local system."}