CVE-2025-4658
Authentication Bypass in OPKSSH
- State
- Published
- Severity
- 9.3 Critical
- Published
- May 13, 2025
- Updated
- May 13, 2025
- Reserved
- May 13, 2025
Description
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L | cloudflare |
Weaknesses
- CWE-305 Authentication Bypass by Primary Weakness
Affected Products
| Product | Versions |
|---|---|
OPKSSHOPKSSH |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.