Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-40909

21
FAUCET Score

CVE-2025-40909 describes a race condition in Perl threads, specifically affecting versions 5.13.6 and later, where file operations may target unintended paths due to a temporary change in the process-wide current working directory during thread creation. This local vulnerability (CVSS 5.9 Medium) allows an attacker to potentially load malicious code or access sensitive files from unexpected locations. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.13.6, < 5.41.13CPE match
cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.9MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
Exploitability Score
2.5
Impact Score
3.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.37%
Probability of exploitation in next 30 days
EPSS Percentile
29.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0037 is in the 49th percentile among its peer group of 3,050 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (15)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: azl3 perl 5.38.2-509 on Azure Linux 3.0Fixed in: 5.38.2-509
microsoftpatch availablevia msrc
Product: 19554-16823Fixed in: 5.34.1-491
microsoftpatch availablevia msrc
Product: 20310-17086Fixed in: 5.34.1-491
microsoftpatch availablevia msrc
Product: 20313-17084Fixed in: 5.38.2-509
microsoftpatch availablevia msrc
Product: cm2 perl 5.34.1-491 on CBL Mariner 2.0Fixed in: 5.34.1-491
microsoftpatch availablevia msrc
Product: cbl2 perl 5.34.1-491 on CBL Mariner 2.0Fixed in: 5.34.1-491
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: perl-4:5.40.2-512.2.el10_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Discovery 2Fixed in: discovery/discovery-server-rhel9:sha256:c517869dacaf4d3650310d4a52e83706e0b311d6ebb4a9b37b1c7acff5c142ec
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: perl-4:5.32.1-481.el9_4.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: perl-4:5.32.1-481.1.el9_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: perl-4:5.26.3-423.el8_10
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: rhcos

Vendor Advisories (5)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
redhatCVE-2025-40909Moderate

perl: Perl threads have a working directory race condition where file operations may target unintended paths

May 30, 2025
microsoft2025-May/CVE-2025-40909Moderate

Perl threads have a working directory race condition where file operations may target unintended paths

May 13, 2025

References

bugs.debian.org / cgi-bin/bugreport.cgi
github.com / Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861e
github.com / Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patch
github.com / Perl/perl5/issues/10387
github.com / Perl/perl5/issues/23010
perldoc.perl.org / 5.14.0/perl5136delta
openwall.com / lists/oss-security/2025/05/22/2
seclists.org / fulldisclosure/2025/Sep/53
seclists.org / fulldisclosure/2025/Sep/54
seclists.org / fulldisclosure/2025/Sep/55
lists.debian.org / debian-lts-announce/2026/04/msg00018.html
openwall.com / lists/oss-security/2025/05/23/1
openwall.com / lists/oss-security/2025/05/30/4
openwall.com / lists/oss-security/2025/06/02/2
openwall.com / lists/oss-security/2025/06/02/5
openwall.com / lists/oss-security/2025/06/02/6
openwall.com / lists/oss-security/2025/06/02/7
openwall.com / lists/oss-security/2025/06/03/1