PT-2025-52670 · Keyfactor · Keyfactor Signserver

Published 2025-12-22 · Updated 2026-01-05 · CVE-2025-26787

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Keyfactor SignServer versions prior to 7.2

Description A flaw exists in the startup logic of the Keyfactor SignServer container. The Admin CLI command, designed to configure certificate access during the initial container startup, incorrectly runs on each container restart. This resets the configuration to allow any user with a valid and trusted client authentication certificate to connect, overriding any more restrictive access settings configured by administrators.

Recommendations Update to a version that is not prior to 7.2.

Fix

Weakness Enumeration

CWE-642

Related Identifiers

CVE-2025-26787

Affected Products

Keyfactor Signserver

References · 7

• https://support.keyfactor.com/hc/en-us/articles/33997706776987-SignServer-security-advisory-Container-vulnerability-CVE-2025-26787-fixed-in-version-7-2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-26787 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26787 · Security Note
• https://twitter.com/VulmonFeeds/status/2003203873264013758 · Twitter Post
• https://t.me/cveNotify/147731 · Telegram Post
• https://docs.keyfactor.com/signserver/latest/signserver-7-2-release-notes · Note
• https://twitter.com/CVEnew/status/2003198621924155872 · Twitter Post