CVE-2021-25311

CVE-2021-25311 is a critical directory traversal vulnerability affecting HTCondor versions prior to 8.9.11. Specifically, the condor_credd component allows authenticated attackers to write files outside the intended SEC_CREDENTIAL_DIRECTORY_OAUTH, potentially leading to arbitrary code execution as root. With a CVSS score of 9.9, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, and community discussion is minimal, the high severity warrants immediate patching.