CVE-2025-54389

Name of the Vulnerable Software and Affected Versions: AIDE versions prior to 0.19.2

Description: AIDE is susceptible to an improper output neutralization issue. An attacker can create a malicious filename containing terminal escape sequences to conceal file additions or removals from reports and manipulate log output. A local user could exploit this to circumvent AIDE’s detection of malicious files. The output of extended attribute key names and symbolic link targets are also not properly neutralized.

Recommendations: Versions prior to 0.19.2: Update to version 0.19.2 or later. Versions prior to 0.19.2: Configure AIDE to write the report output to a regular file. Versions prior to 0.19.2: Redirect stdout to a regular file. Versions prior to 0.19.2: Redirect the log output written to stderr to a regular file.