CVE-2025-4658 — Authentication Bypass in OPKSSH

CVE-2025-4658

Authentication Bypass in OPKSSH PUBLISHED

Description (CNA)

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.

Affected (CNA)

Vendor / product	Versions
OPKSSH / OPKSSH	affected 0.1.0 through 0.4.0

CWE

CWE-305

References

https://github.com/openpubkey/opkssh

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.