PT-2025-49761 · Unknown · Fiber Utils

Published 2025-12-09 · Updated 2026-01-06 · CVE-2025-66565

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fiber Utils versions 2.0.0-rc.3 and below

Description Fiber Utils is a collection of functions for Fiber. In versions 2.0.0-rc.3 and below, if the system’s cryptographic random number generator (crypto/rand) fails, the software silently reverts to generating predictable UUID values, including the zero UUID "00000000-0000-0000-0000-000000000000". This occurs due to failures in the crypto/rand.Read() function, potentially compromising the security of Fiber applications using these functions for security-critical operations.

Recommendations Update to version 2.0.0-rc.4 or later.

Exploit

Fix

Unchecked Return Value

Weakness Enumeration

CWE-252

CWE-331

CWE-338

Related Identifiers

CVE-2025-66565

GHSA-M98W-CQP3-QCQR

GO-2025-4208

SUSE-SU-2026:0037-1

Affected Products

Fiber Utils

References · 89

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66565.json · Exploit
• 🔥 https://github.com/gofiber/utils/security/advisories/GHSA-m98w-cqp3-qcqr · Exploit
• https://github.com/gofiber/utils/commit/6c6cf047032b9c8dff43d29f990b4b10e9b02d47 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:0037-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66565 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66565 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-8110 · Note
• https://suse.com/security/cve/CVE-2025-54410 · Note
• https://suse.com/security/cve/CVE-2025-65754 · Note
• https://suse.com/security/cve/CVE-2025-66565 · Note
• https://suse.com/security/cve/CVE-2025-68940 · Note
• https://suse.com/security/cve/CVE-2025-11393 · Note
• https://suse.com/security/cve/CVE-2025-67717 · Note
• https://suse.com/security/cve/CVE-2025-68113 · Note