CVE-2025-44005

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks.

Score

CVSS 3.1 10.0 Critical

Status

Deferred - talos-cna@cisco.com

Published

2025-12-17

Last modified

2025-12-17

Weaknesses

CWE-287

Affected products

• Step-ca (Smallstep)

References

• https://github.com/smallstep/certificates/security/advisories/GHSA-h8cp-697h-8c8p
• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2242
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2242