CVE-2025-44657

CVE-2025-44657 is a low-severity vulnerability affecting Linksys EA6350 V2.1.2 routers, stemming from the enabled chroot_local_user option in the vsftpd configuration. This misconfiguration could allow an attacker to gain unauthorized access to system files, potentially leading to privilege escalation or using the device as a pivot for further network attacks. The CVSS score is 3.9 (LOW), indicating a local attack vector with low complexity and user interaction required, resulting in limited confidentiality and integrity impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.