--- id: CVE-2025-3155 title: A flaw was found in Yelp summary: >- A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. severity: high cvss: 7.4 cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N' cwe: - CWE-601 - CWE-601 vendor: gnome product: yelp affected: - yelp = 42.2-8 - debian_linux = 11.0 - codeready_linux_builder = 8.0 - codeready_linux_builder = 9.0 - codeready_linux_builder_for_arm64 = 8.0_aarch64 - codeready_linux_builder_for_arm64 = 9.0_aarch64 - codeready_linux_builder_for_arm64_eus = 8.8_aarch64 - codeready_linux_builder_for_arm64_eus = 9.2_aarch64 - codeready_linux_builder_for_arm64_eus = 9.4_aarch64 - codeready_linux_builder_for_arm64_eus = 9.6_aarch64 - codeready_linux_builder_for_eus = 8.8 - codeready_linux_builder_for_eus = 9.2 - codeready_linux_builder_for_eus = 9.4 - codeready_linux_builder_for_ibm_z_systems = 8.0_s390x - codeready_linux_builder_for_ibm_z_systems = 9.0_s390x - codeready_linux_builder_for_ibm_z_systems_eus = 8.8_s390x - codeready_linux_builder_for_ibm_z_systems_eus = 9.2_s390x - codeready_linux_builder_for_ibm_z_systems_eus = 9.4_s390x - codeready_linux_builder_for_ibm_z_systems_eus = 9.6_s390x - codeready_linux_builder_for_power_little_endian = 8.0_ppc64le - codeready_linux_builder_for_power_little_endian = 9.0_ppc64le - codeready_linux_builder_for_power_little_endian_eus = 8.8_ppc64le - codeready_linux_builder_for_power_little_endian_eus = 9.2_ppc64le - codeready_linux_builder_for_power_little_endian_eus = 9.4_ppc64le - codeready_linux_builder_for_power_little_endian_eus = 9.6_ppc64le - enterprise_linux = 8.0 - enterprise_linux = 9.0 - enterprise_linux_eus = 9.2 - enterprise_linux_eus = 9.4 - enterprise_linux_eus = 9.6 - enterprise_linux_for_arm_64 = 8.0 - enterprise_linux_for_arm_64 = 8.8_aarch64 - enterprise_linux_for_arm_64 = 9.0_aarch64 - enterprise_linux_for_arm_64 = 9.2_aarch64 - enterprise_linux_for_arm_64_eus = 9.4_aarch64 - enterprise_linux_for_arm_64_eus = 9.6_aarch64 - enterprise_linux_for_ibm_z_systems = 8.0_s390x - enterprise_linux_for_ibm_z_systems = 9.0_s390x - enterprise_linux_for_ibm_z_systems_eus = 8.8_s390x - enterprise_linux_for_ibm_z_systems_eus = 9.2_s390x - enterprise_linux_for_ibm_z_systems_eus = 9.4_s390x - enterprise_linux_for_ibm_z_systems_eus = 9.6_s390x - enterprise_linux_for_power_little_endian = 8.0_ppc64le - enterprise_linux_for_power_little_endian = 9.0_ppc64le - enterprise_linux_for_power_little_endian_eus = 8.8_ppc64le - enterprise_linux_for_power_little_endian_eus = 9.2_ppc64le - enterprise_linux_for_power_little_endian_eus = 9.4_ppc64le - enterprise_linux_for_power_little_endian_eus = 9.6_ppc64le - enterprise_linux_server_aus = 8.2 - enterprise_linux_server_aus = 8.4 - enterprise_linux_server_aus = 8.6 - enterprise_linux_server_aus = 9.2 - enterprise_linux_server_aus = 9.4 - enterprise_linux_server_aus = 9.6 - enterprise_linux_server_tus = 8.4 - enterprise_linux_server_tus = 8.6 - enterprise_linux_server_tus = 8.8 - enterprise_linux_update_services_for_sap_solutions = 8.4 - enterprise_linux_update_services_for_sap_solutions = 8.6 - enterprise_linux_update_services_for_sap_solutions = 8.8 - enterprise_linux_update_services_for_sap_solutions = 9.0 - enterprise_linux_update_services_for_sap_solutions = 9.2 - enterprise_linux_update_services_for_sap_solutions = 9.4 published: '2025-04-03' updated: '2026-06-25' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-3155' references: - url: 'https://access.redhat.com/errata/RHSA-2025:4450' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:4451' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:4455' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:4456' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:4457' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:4505' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:4532' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:7430' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:7569' label: secalert@redhat.com - url: 'https://access.redhat.com/security/cve/CVE-2025-3155' label: secalert@redhat.com - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2357091' label: secalert@redhat.com - url: 'https://gitlab.gnome.org/GNOME/yelp/-/issues/221' label: secalert@redhat.com - url: 'http://www.openwall.com/lists/oss-security/2025/04/04/1' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2025/05/msg00036.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2025/05/msg00037.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://gist.github.com/parrot409/e970b155358d45b298d7024edd9b17f2' label: 134c704f-9b21-4f2e-91b3-4a467353bcc0 tags: - nvd epss: 0.14214 epssPercentile: 0.96477 ingestedAt: '2026-06-26T16:43:13.584Z' --- ## Overview A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. ## Affected - `yelp = 42.2-8` - `debian_linux = 11.0` - `codeready_linux_builder = 8.0` - `codeready_linux_builder = 9.0` - `codeready_linux_builder_for_arm64 = 8.0_aarch64` - `codeready_linux_builder_for_arm64 = 9.0_aarch64` - `codeready_linux_builder_for_arm64_eus = 8.8_aarch64` - `codeready_linux_builder_for_arm64_eus = 9.2_aarch64` - `codeready_linux_builder_for_arm64_eus = 9.4_aarch64` - `codeready_linux_builder_for_arm64_eus = 9.6_aarch64` - `codeready_linux_builder_for_eus = 8.8` - `codeready_linux_builder_for_eus = 9.2` - `codeready_linux_builder_for_eus = 9.4` - `codeready_linux_builder_for_ibm_z_systems = 8.0_s390x` - `codeready_linux_builder_for_ibm_z_systems = 9.0_s390x` - `codeready_linux_builder_for_ibm_z_systems_eus = 8.8_s390x` - `codeready_linux_builder_for_ibm_z_systems_eus = 9.2_s390x` - `codeready_linux_builder_for_ibm_z_systems_eus = 9.4_s390x` - `codeready_linux_builder_for_ibm_z_systems_eus = 9.6_s390x` - `codeready_linux_builder_for_power_little_endian = 8.0_ppc64le` - `codeready_linux_builder_for_power_little_endian = 9.0_ppc64le` - `codeready_linux_builder_for_power_little_endian_eus = 8.8_ppc64le` - `codeready_linux_builder_for_power_little_endian_eus = 9.2_ppc64le` - `codeready_linux_builder_for_power_little_endian_eus = 9.4_ppc64le` - `codeready_linux_builder_for_power_little_endian_eus = 9.6_ppc64le` - `enterprise_linux = 8.0` - `enterprise_linux = 9.0` - `enterprise_linux_eus = 9.2` - `enterprise_linux_eus = 9.4` - `enterprise_linux_eus = 9.6` - `enterprise_linux_for_arm_64 = 8.0` - `enterprise_linux_for_arm_64 = 8.8_aarch64` - `enterprise_linux_for_arm_64 = 9.0_aarch64` - `enterprise_linux_for_arm_64 = 9.2_aarch64` - `enterprise_linux_for_arm_64_eus = 9.4_aarch64` - `enterprise_linux_for_arm_64_eus = 9.6_aarch64` - `enterprise_linux_for_ibm_z_systems = 8.0_s390x` - `enterprise_linux_for_ibm_z_systems = 9.0_s390x` - `enterprise_linux_for_ibm_z_systems_eus = 8.8_s390x` - `enterprise_linux_for_ibm_z_systems_eus = 9.2_s390x` - `enterprise_linux_for_ibm_z_systems_eus = 9.4_s390x` - `enterprise_linux_for_ibm_z_systems_eus = 9.6_s390x` - `enterprise_linux_for_power_little_endian = 8.0_ppc64le` - `enterprise_linux_for_power_little_endian = 9.0_ppc64le` - `enterprise_linux_for_power_little_endian_eus = 8.8_ppc64le` - `enterprise_linux_for_power_little_endian_eus = 9.2_ppc64le` - `enterprise_linux_for_power_little_endian_eus = 9.4_ppc64le` - `enterprise_linux_for_power_little_endian_eus = 9.6_ppc64le` - `enterprise_linux_server_aus = 8.2` - `enterprise_linux_server_aus = 8.4` - `enterprise_linux_server_aus = 8.6` - `enterprise_linux_server_aus = 9.2` - `enterprise_linux_server_aus = 9.4` - `enterprise_linux_server_aus = 9.6` - `enterprise_linux_server_tus = 8.4` - `enterprise_linux_server_tus = 8.6` - `enterprise_linux_server_tus = 8.8` - `enterprise_linux_update_services_for_sap_solutions = 8.4` - `enterprise_linux_update_services_for_sap_solutions = 8.6` - `enterprise_linux_update_services_for_sap_solutions = 8.8` - `enterprise_linux_update_services_for_sap_solutions = 9.0` - `enterprise_linux_update_services_for_sap_solutions = 9.2` - `enterprise_linux_update_services_for_sap_solutions = 9.4` ## Remediation Refer to the linked advisories for vendor-supplied fixes and affected version ranges.