{"action":"Upgrade ckermit to 416~beta12-5 or later.","affected":[{"fixed":"416~beta12-5","introduced":"0"}],"component":"ckermit","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["416~beta12-5"],"id":"tcs_01M5NPAVCHDY9NWM2VNMF7HE8R","modified_at":"2026-10-08T10:00:25.628081567Z","published_at":"2025-12-24T22:15:43.550Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-68920","https://security-tracker.debian.org/tracker/CVE-2025-68920"],"severity":{"label":"high","score":8.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-68920#Debian:14/ckermit","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-68920"}],"summary":"C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary files from the local system."}