CVE-2022-50237 `ed25519-dalek` Double Public Key Signing Function Oracle Attack
Attackers can extract private keys via a signing oracle attack in the ed25519-dalek Rust library, compromising cryptographic security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-50237?
CVE-2022-50237 is a medium-severity vulnerability in dalek-cryptography ed25519-dalek, published on 28 Jul 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key.
Weakness: CWE-497
Which versions are affected by CVE-2022-50237?
5 open source packages ship an affected version, including ed25519-dalek, crypton and cryptonite.
| Package | Affected | Fixed in |
|---|---|---|
ed25519-dalek crates.io | All versions | 2.0.0 |
ed25519-dalek crates.io | All versions | 2.0.0 |
ed25519-dalek crates.io | From 0.0.0-0 | 2.0.0 |
crypton Hackage | From 0.31 | 1.0.3 |
cryptonite Hackage | From 0.1 | None |
How do I fix CVE-2022-50237?
Upgrade ed25519-dalek to 2.0.0 or later.
Is CVE-2022-50237 being exploited?
There is no known exploitation of CVE-2022-50237 in the wild and no public exploit code.
Sources
Also known as GHSA-w5vr-6qhr-36cc, HSEC-2025-0002, RUSTSEC-2022-0093, UBUNTU-CVE-2022-50237.