7ritn VaulTLS up to 0.9.0 weak password

Summaryinfo

A vulnerability, which was classified as critical, has been found in 7ritn VaulTLS up to 0.9.0. Affected by this issue is some unknown functionality. Performing a manipulation results in weak password. This vulnerability is known as CVE-2025-55299. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in 7ritn VaulTLS up to 0.9.0. This affects an unknown functionality. The manipulation with an unknown input leads to a weak password vulnerability. CWE is classifying the issue as CWE-521. The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

VaulTLS is a modern solution for managing mTLS (mutual TLS) certificates. Prior to 0.9.1, user accounts created through the User web UI have an empty but not NULL password set, attackers can use this to login with an empty password. This is combined with that fact, that previously disabling the password based login only effected the frontend, but still allowed login via the API. This vulnerability is fixed in 0.9.1.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2025-55299 since 08/12/2025. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1552 according to MITRE ATT&CK.

Upgrading to version 0.9.1 eliminates this vulnerability. Applying the patch 6ac0a43a768f1753f6889ba43f914e773a4b45c0 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-25133). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• 7ritn

Name

• VaulTLS

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.6
• 0.7
• 0.8
• 0.9.0

License

• open-source

Website

• Product: https://github.com/7ritn/VaulTLS/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion