{"id":"EUVD-2025-211104","enisaUuid":"816fa49d-d0f3-31c1-9e0c-2d09e9f684f0","description":"A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In case the server that is being connected to has a trusted entry in the known_hosts file, then Fleet will correctly check the authenticity of the presented certificate.","datePublished":"Oct 15, 2026, 8:16:46 AM","dateUpdated":"Oct 15, 2026, 2:21:33 PM","baseScore":6.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","references":"https://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2025-23390\nhttps://github.com/rancher/fleet/security/advisories/GHSA-xgpc-q899-67p8\n","aliases":"CVE-2025-23390\nGHSA-xgpc-q899-67p8\n","assigner":"suse","epss":0.19,"enisaIdProduct":[{"id":"8467d35f-e476-34a3-82af-1235bcb115f6","product":{"name":"Fleet","vendor":{"name":"fleetdm"}},"product_version":"0.9.0-rc.1 \u003c0.10.12"},{"id":"9f8a64d1-5983-3db8-96a9-f08ecb94090e","product":{"name":"Fleet","vendor":{"name":"fleetdm"}},"product_version":"0.12.0 \u003c0.12.2"},{"id":"c763589a-d4ea-3867-b8d2-631f80c511a6","product":{"name":"Fleet","vendor":{"name":"fleetdm"}},"product_version":"0.11.0 \u003c0.11.7"}],"enisaIdVendor":[{"id":"0d3b3d47-8ceb-3dad-b493-6caba0ab220b","vendor":{"name":"SUSE"}}],"enisaIdVulnerability":[{"id":"3d7b1e90-fe14-3811-8b0e-3e5623a64d87","vulnerability":{"id":"CVE-2025-23390","description":"A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In case the server that is being connected to has a trusted entry in the known_hosts file, then Fleet will correctly check the authenticity of the presented certificate.","datePublished":"Oct 15, 2026, 8:16:46 AM","dateUpdated":"Oct 15, 2026, 2:21:33 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","references":"https://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2025-23390\nhttps://github.com/rancher/fleet/security/advisories/GHSA-xgpc-q899-67p8\n","enisa_id":"EUVD-2025-211104\n","assigner":"suse","epss":0.19,"dataProcessed":"Nov 6, 2026, 7:16:44 AM","vulnerabilityProduct":[{"id":"265508dd-d7ef-3b8d-bf18-eb482c8dbc96","product":{"name":"Fleet","vendor":{"name":"fleetdm"}},"product_version":"0.9.0-rc.1 \u003c0.10.12"},{"id":"7511dff3-2ef2-3b07-8d64-718bd46d00bf","product":{"name":"Fleet","vendor":{"name":"fleetdm"}},"product_version":"0.11.0 \u003c0.11.7"},{"id":"d6f7f08b-e414-3947-8200-9b7c7e2d7e17","product":{"name":"Fleet","vendor":{"name":"fleetdm"}},"product_version":"0.12.0 \u003c0.12.2"}],"vulnerabilityVendor":[{"id":"eec15d26-f836-329f-b9bf-f55a9e9164db","vendor":{"name":"SUSE"}}]}},{"id":"ad5129be-c620-3151-9013-4e1e7052d6f0","vulnerability":{"id":"GHSA-xgpc-q899-67p8","description":"Fleet doesn’t validate a server’s certificate when connecting through SSH","datePublished":"Apr 25, 2025, 3:11:07 PM","dateUpdated":"May 5, 2025, 10:00:39 PM","baseScore":0.0,"references":"https://github.com/rancher/fleet/security/advisories/GHSA-xgpc-q899-67p8\nhttps://github.com/rancher/fleet/pull/3571\nhttps://github.com/rancher/fleet/pull/3572\nhttps://github.com/rancher/fleet/pull/3573\nhttps://github.com/rancher/fleet\nhttps://github.com/rancher/fleet/releases/tag/v0.10.12\nhttps://github.com/rancher/fleet/releases/tag/v0.11.7\nhttps://github.com/rancher/fleet/releases/tag/v0.12.2\nhttps://pkg.go.dev/vuln/GO-2025-3649\n","enisa_id":"EUVD-2025-211104\n","aliases":"CVE-2025-23390\nGHSA-xgpc-q899-67p8\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:11:42 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"0c9cc1e6-81de-37b2-bffb-cb5fb272057e","advisory":{"id":"openSUSE-SU-2025:15059-1","description":"govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media","datePublished":"May 7, 2025, 12:00:00 AM","dateUpdated":"Oct 18, 2026, 10:26:24 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15059-1.json\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HNV7O7SNYYY4AFS5HKAPLITKK3B57LE7/\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HNV7O7SNYYY4AFS5HKAPLITKK3B57LE7/\nhttps://www.suse.com/security/cve/CVE-2019-11243/\nhttps://www.suse.com/security/cve/CVE-2023-32198/\nhttps://www.suse.com/security/cve/CVE-2024-22031/\nhttps://www.suse.com/security/cve/CVE-2025-23390/\nhttps://www.suse.com/security/cve/CVE-2025-32777/\nhttps://www.suse.com/security/cve/CVE-2025-3879/\nhttps://www.suse.com/security/cve/CVE-2025-4166/\nhttps://www.suse.com/security/cve/CVE-2025-4210/\nhttps://www.suse.com/security/cve/CVE-2025-46327/\nhttps://www.suse.com/security/cve/CVE-2025-46342/\nhttps://www.suse.com/security/cve/CVE-2025-46569/\nhttps://www.suse.com/security/cve/CVE-2025-46599/\n","aliases":"CVE-2019-11243\nCVE-2023-32198\nCVE-2024-22031\nCVE-2025-23390\nCVE-2025-32777\nCVE-2025-3879\nCVE-2025-4166\nCVE-2025-4210\nCVE-2025-46327\nCVE-2025-46342\nCVE-2025-46569\nCVE-2025-46599\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0e05f718-ad99-371d-aa00-a5ad76b3cee6","product":{"name":"govulncheck-vulndb-0.0.20250506T153719-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3839ae30-44f1-3456-a197-a14fd52d4d02","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"68a9ceca-58a6-31fa-8e3c-719939718db0","product":{"name":"govulncheck-vulndb-0:0.0.20250506T153719-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6a4e45e6-b90a-3ec6-8f91-4864558e8864","product":{"name":"govulncheck-vulndb-0.0.20250506T153719-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"8fbc1432-35ea-3d64-8822-a14545058c65","product":{"name":"govulncheck-vulndb-0.0.20250506T153719-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"953591f6-d69a-369c-a6de-f379a9b9c770","product":{"name":"govulncheck-vulndb-0:0.0.20250506T153719-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b8e05493-1775-36ab-85bd-2ed31ca6ad69","product":{"name":"govulncheck-vulndb-0:0.0.20250506T153719-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c3c7f273-c243-3743-9721-c4372d6d222b","product":{"name":"govulncheck-vulndb-0:0.0.20250506T153719-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"eb786e11-5a82-36a1-85e1-81693120f50d","product":{"name":"govulncheck-vulndb-0.0.20250506T153719-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}}]}