CVE-2025-54471

—

CVSS 3.1

6.5 medium

EPSS

<1%p16

Published

Oct 30, 2025 (Oct 30, 2025)

Modified

Jun 17, 2026

Description

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data.

Weakness: CWE-321
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.