PT-2025-39337 · Wireguard+3 · Wireguard+4

Smira · Published 2025-09-24 · Updated 2025-12-22 · CVE-2025-59824

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Omni versions prior to 0.48.0

Description Omni, a Kubernetes management platform, has a potential issue where the Wireguard SideroLink component could be exploited to allow unauthorized packet transmission. The system establishes a peer-to-peer connection using WireGuard for mutual authentication and authorization. While the source IP address of incoming packets is validated, the destination address is not. This lack of destination address validation, combined with the untrusted nature of the Talos environment and potential access from workloads with host networking, could allow a malicious workload to send arbitrary packets over the SideroLink interface.

Recommendations Update to version 0.48.0 or later.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-59824

GHSA-HQRF-67PM-WGFQ

GO-2025-3979

OPENSUSE-SU-2025:15666-1

SUSE-SU-2025:3799-1

Affected Products

Kubernetes

Omni

Siderolink

Talos

Wireguard

References · 50

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59824.json · Exploit
• https://github.com/siderolabs/omni/commit/a5efd816a239e6c9e5ea7c0d43c02c04504d7b60 · Patch
• https://github.com/siderolabs/omni/security/advisories/GHSA-hqrf-67pm-wgfq · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hqrf-67pm-wgfq · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3979 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3799-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59824 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59824 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15666-1 · Vendor Advisory
• https://github.com/siderolabs/omni · Note
• https://suse.com/security/cve/CVE-2025-59346 · Note
• https://suse.com/security/cve/CVE-2024-58267 · Note
• https://twitter.com/CVEnew/status/1970996071208976818 · Twitter Post
• https://suse.com/security/cve/CVE-2025-59348 · Note
• https://suse.com/security/cve/CVE-2025-47910 · Note