CVE-2025-4658
Authentication Bypass in OPKSSH
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Authentication Bypass in OPKSSH
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.
Reserved 2025-05-13 | Published 2025-05-13 | Updated 2025-05-13 | Assigner cloudflareCWE-305: Authentication Bypass by Primary Weakness
Ethan Heilman
Support options
