CVE-2025-11625

Published October 21st, 2025

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of clients credentials.

wolfSSL/wolfssh

wolfSSH is a small, fast, portable SSH implementation, including support for SCP and SFTP.

GitHub

472