PT-2025-38233 · Elastic+1 · Elasticsearch+1

CVE-2025-35434 · Published 2025-09-17 · Updated 2025-09-18

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CISA Thorium versions prior to 1.1.2

Description CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. This allows an unauthenticated attacker with access to a Thorium cluster to impersonate the Elasticsearch service.

Recommendations Update to version 1.1.2 or later.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2025-35434

Affected Products

Cisa Thorium

Elasticsearch

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/35xxx/CVE-2025-35434.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-35434 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-35434 · Security Note
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-35434 · Security Note
• https://github.com/cisagov/thorium/releases/tag/1.1.2 · Note
• https://github.com/cisagov/thorium/blob/main/api/src/models/backends/setup/elastic_setup.rs#L36-L43 · Note
• https://t.me/CVEtracker/32775 · Telegram Post
• https://twitter.com/CVEnew/status/1968561239748903010 · Twitter Post