CVE-2025-55299 VaulTLS has a password-based login exploit in additional user accounts
Attackers can log in with empty passwords to user accounts created via the UI, bypassing authentication controls in VaulTLS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-55299?
CVE-2025-55299 is a critical authentication bypass vulnerability in 7ritn VaulTLS, published on 18 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
VaulTLS is a modern solution for managing mTLS (mutual TLS) certificates. Prior to 0.9.1, user accounts created through the User web UI have an empty but not NULL password set, attackers can use this to login with an empty password. This is combined with that fact, that previously disabling the password based login only effected the frontend, but still allowed login via the API. This vulnerability is fixed in 0.9.1.
Weakness: CWE-521
Which versions are affected by CVE-2025-55299?
How do I fix CVE-2025-55299?
No fix has been published for CVE-2025-55299 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-55299 being exploited?
There is no known exploitation of CVE-2025-55299 in the wild and no public exploit code.
Sources
Also known as GHSA-pjfr-pj3h-cw8m.