PT-2025-42886 · Wolfssh · Wolfssh

Published 2025-10-21 · Updated 2025-10-24 · CVE-2025-11625

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions wolfSSH versions prior to 1.4.20

Description An improper host authentication issue exists in wolfSSH clients. This allows bypassing host authentication and potentially leaking client credentials.

Recommendations Update wolfSSH to version 1.4.20 or later.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2026-02585

CVE-2025-11625

Affected Products

Wolfssh

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11625.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11625 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11625 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02585 · Security Note
• https://github.com/wolfSSL/wolfssh/pull/840 · Note
• https://t.me/CVEtracker/35397 · Telegram Post
• https://twitter.com/wolfSSL/status/1981784058095902930 · Twitter Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-42886 · Note