CVE-2025-46712 Erlang/OTP SSH Has Strict KEX Violations
A Man-in-the-Middle attacker can bypass SSH handshake hardening measures in Erlang/OTP by injecting optional messages during the key exchange.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-46712?
CVE-2025-46712 is a low-severity vulnerability in erlang otp, published on 8 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).
Weakness: CWE-440
Which versions are affected by CVE-2025-46712?
How do I fix CVE-2025-46712?
Upgrade to a fixed version.
Is CVE-2025-46712 being exploited?
There is no known exploitation of CVE-2025-46712 in the wild and no public exploit code.
Sources
Also known as AZL-61744, AZL-61748, CLEANSTART-2026-LK44772, DEBIAN-CVE-2025-46712, GHSA-934x-xq38-hhqf, OESA-2025-1552 and 2 more.