VulnerabilityDeferred

CVE-2025-41702

An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.

CRITICAL 9.8EPSS 0.52%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.52%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.52% probability · 43th percentile
CISA KEV: Not listed
Weakness: CWE-321
Source: info@cert.vde.com

References

https://certvde.com/de/advisories/VDE-2025-076

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.