VULNERABILITY INTELLIGENCE

CVE-2025-2886

CVSS score4.5 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2025-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Description

Missing validation of terminating delegation causes the client to continue searching the defined delegation list, even after searching a terminating delegation. This could cause the client to fetch a target from an incorrect source, altering the target contents. Users should upgrade to tough version 0.20.0 or later and ensure any forked or derivative code is patched to incorporate the new fixes.

Weakness classification

  • ff89ba41-3aa1-4d27-914a-91399e9639e5: CWE-670

Primary references