PT-2025-32334 · Jwe · Jwe

Sideni · Published 2025-08-07 · Updated 2025-10-05 · CVE-2025-54887

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions jwe versions 1.1.0 and below

Description The authentication tag of encrypted JWEs can be brute forced, potentially leading to a loss of confidentiality and the ability to craft arbitrary JWEs. This allows modification of JWEs to decrypt to an arbitrary value and decryption by observing parsing differences. The GCM internal GHASH key can be recovered. Users are affected even if they do not use an AES-GCM encryption algorithm.

Recommendations Upgrade to version 1.1.1. Rotate the encryption keys after upgrading to version 1.1.1.

Exploit

Fix

Weakness Enumeration

CWE-354

Related Identifiers

BDU:2025-09559

CVE-2025-54887

GHSA-C7P4-HX26-PR73

Affected Products

Jwe

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54887.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jwe/CVE-2025-54887.yml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-54887 · Security Note
• https://osv.dev/vulnerability/GHSA-c7p4-hx26-pr73 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54887 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09559 · Security Note
• https://github.com/jwt/ruby-jwe · Note
• https://github.com/jwt/ruby-jwe/security/advisories/GHSA-c7p4-hx26-pr73 · Note
• https://github.com/jwt/ruby-jwe/commit/1e719d79ba3d7aadaa39a2f08c25df077a0f9ff1 · Note
• https://t.me/pentestingnews/65960 · Telegram Post
• https://t.me/c/1627154862/199817 · Note
• https://twitter.com/rubylandnews/status/1953884043683963140 · Twitter Post
• https://t.me/CVEtracker/29485 · Telegram Post
• https://twitter.com/fridaysecurity/status/1953644466146799868 · Twitter Post
• https://twitter.com/offseq/status/1953629865220943895 · Twitter Post