Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2025-12790

Rubygem-mqtt: rubygem-mqtt hostname validation

Description

A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle (MITM) attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nicholas J Humfrey ruby-mqtt

Default version status: unaffected

  • 0 to < 0.7.0affected

Red Hat Red Hat Satellite 6

Default version status: affected

Red Hat Red Hat Satellite 6

Default version status: affected

References