CVE-2025-11625

Host verification bypass and credential leak PUBLISHED

Description (CNA)

Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of clients credentials.

Affected (CNA)

Vendor / product	Versions
wolfSSL / wolfSSH	affected 1.4.20;0

CWE

CWE-287

References

https://github.com/wolfSSL/wolfssh/pull/840

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.