CVE-2025-23394 | SUSE openSUSE Tumbleweed 2.5.0-1.1 cyrus-imapd symlink

A vulnerability classified as critical was found in SUSE openSUSE Tumbleweed 2.5.0-1.1. Affected by this vulnerability is an unknown functionality of the component cyrus-imapd. The manipulation leads to symlink following.

This vulnerability is known as CVE-2025-23394. An attack has to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.