CVE-2025-58356 Constellation allows insecure use of LUKS2 persistent storage partitions
Attackers can bypass LUKS2 encryption in Constellation CVMs due to unsafe null keyslot handling, exposing persistent storage data.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-58356?
CVE-2025-58356 is a high-severity vulnerability in edgelesssys constellation, published on 27 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Constellation is the first Confidential Kubernetes. The Constellation CVM image uses LUKS2-encrypted volumes for persistent storage. When opening an encrypted storage device, the CVM uses the libcryptsetup function crypt_activate_by_passhrase. If the VM is successful in opening the partition with the disk encryption key, it treats the volume as confidential. However, due to the unsafe handling of null keyslot algorithms in the cryptsetup 2.8.1, it is possible that the opened volume is not encrypted at all. Cryptsetup prior to version 2.8.1 does not report an error when processing LUKS2-formatted disks that use the cipher_null-ecb algorithm in the keyslot encryption field. This vulnerability is fixed in 2.24.0.
Weakness: CWE-347
Which versions are affected by CVE-2025-58356?
4 open source packages ship an affected version, including github.com/edgelesssys/constellation/v2 and github.com/edgelesssys/constellation.
| Package | Affected | Fixed in |
|---|---|---|
github.com/edgelesssys/constellation/v2 Go | All versions | 2.24.0 |
github.com/edgelesssys/constellation/v2 Go | All versions | 2.24.0 |
github.com/edgelesssys/constellation/v2 Go | All versions | 2.24.0 |
github.com/edgelesssys/constellation Go | All versions | None |
How do I fix CVE-2025-58356?
Upgrade github.com/edgelesssys/constellation/v2 to 2.24.0 or later.
Is CVE-2025-58356 being exploited?
There is no known exploitation of CVE-2025-58356 in the wild and no public exploit code.
Sources
Also known as GHSA-hq76-6gh2-5g4q, GO-2025-4076.