PT-2025-42886 · Wolfssh · Wolfssh

Published 2025-10-21 · Updated 2025-10-24 · CVE-2025-11625

Positive Technologies · (AI Summary)

CVSS v2.0

10

Critical

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions wolfSSH versions prior to 1.4.20

Description An improper host authentication issue exists in wolfSSH clients. This allows bypassing host authentication and potentially leaking client credentials.

Recommendations Update wolfSSH to version 1.4.20 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2026-02585

CVE-2025-11625

Affected Products

Wolfssh

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-11625 · Security Note
• https://bdu.fstec.ru/vul/2026-02585 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11625 · Vendor Advisory
• https://github.com/wolfSSL/wolfssh/pull/840 · Note
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-42886 · Note
• https://t.me/CVEtracker/35397 · Telegram Post
• https://twitter.com/wolfSSL/status/1981784058095902930 · Twitter Post