Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-54471

NeuVector is shipping cryptographic material into its binary

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE neuvector

Default version status: unaffected

  • 5.3.0 to < 5.4.7affected
  • 0.0.0-20230727023453-1c4957d53911 to < 0.0.0-20251020133207-084a437033b4affected

References