CVE-2025-11625criticalCWE-287

CVE-2025-11625: critical vulnerability in wolfSSL wolfSSH

Host verification bypass and credential leak

Published · Updated

Follow this CVE+ Monitor wolfSSH

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.4epss 0.4%
In short

wolfSSH clients before version 1.4.21 fail to properly verify the server's identity, allowing attackers to impersonate legitimate servers and steal user credentials during SSH connections.

Technical detail

CWE-287 improper authentication in wolfSSH versions ≤1.4.20 enables man-in-the-middle attacks where clients skip or inadequately validate host keys, leading to credential compromise. The vulnerability affects SSH client implementations that rely on this library without proper certificate pinning or host key verification.

Summary generated and translated by AI from the official description.
Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of clients credentials.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/U:Red
Affected products
wolfSSL · wolfSSH
Related CVEs — wolfSSL wolfSSH

In the same product, most dangerous first.

CVE-2026-83540HIGHwolfSSHd on Windows race condition leading to logon token reused across connectionsEPSS 0.6%CVE-2025-14942CRITICALAuthentication BypassEPSS 0.4%CVE-2025-15382MEDIUMClient SCP Request Triggers Buffer Overread by 1 ByteEPSS 0.4%CVE-2026-0930LOWPotential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal ResizeEPSS 0.2%