CVE-2026-40947

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.

Score

CVSS 3.1 2.9 Low

Status

Awaiting Analysis - cve@mitre.org

Published

2026-04-16

Last modified

2026-10-26

Weaknesses

CWE-426

Affected products

• Libfido2 (Yubico)
• Python-fido2 (Yubico)
• Yubikey-manager (Yubico)

References

• https://www.yubico.com/support/security-advisories/ysa-2026-01/