Read the docs
TI-2025-34267 Aliases CVE-2025-54470GHSA-qqj3-g7mx-5p4w

NeuVector telemetry sender is vulnerable to MITM and DoS

Priority MEDIUM 43CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Spoofing, Denial of service
Confidentiality · integrity · availability
Low · Low · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-295 and CWE-770.

Summary

This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server. In affected versions, NeuVector does not enforce TLS certificate verification when transmitting anonymous cluster data to the telemetry server. As a result, the communication channel is susceptible to man-in-the-middle (MITM) attacks, where an attacker could intercept or modify the transmitted data. Additionally, NeuVector loads the response of the telemetry server is loaded into memory without size limitation, which makes it vulnerable to a Denial of Service(DoS) attack

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00198 9th percentileScored 2026-11-07
Fix Fixed neuvector (SUSE): 5.3.5, 5.4.7, 0.0.0-20251020133207-084a437033b4github.com/neuvector/neuvector (Go): 0.0.0-20251020133207-084a437033b4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSEneuvector5.3.0 to before 5.3.5; 5.4.0 to before 5.4.7; 0.0.0-20230727023453-1c4957d53911 to before 0.0.0-20251020133207-084a437033b45.3.5, 5.4.7, 0.0.0-20251020133207-084a437033b4Patch availableCNA
—github.com/neuvector/neuvector (Go)0.0.0-20230727023453-1c4957d53911 to before 0.0.0-20251020133207-084a437033b40.0.0-20251020133207-084a437033b4Patch availableGHSA-qqj3-g7mx-5p4w
  • neuvector VendorSUSE Affected 5.3.0 to before 5.3.5; 5.4.0 to before 5.4.7; 0.0.0-20230727023453-1c4957d53911 to before 0.0.0-20251020133207-084a437033b4 Fixed in 5.3.5, 5.4.7, 0.0.0-20251020133207-084a437033b4 Patch available CNA
  • github.com/neuvector/neuvector (Go) Vendor— Affected 0.0.0-20230727023453-1c4957d53911 to before 0.0.0-20251020133207-084a437033b4 Fixed in 0.0.0-20251020133207-084a437033b4 Patch available GHSA-qqj3-g7mx-5p4w

Remediation

  • Fix · CNA neuvector (SUSE) Fixed in 5.3.5, 5.4.7, 0.0.0-20251020133207-084a437033b4
  • Fix · GHSA-qqj3-g7mx-5p4w github.com/neuvector/neuvector (Go) Fixed in 0.0.0-20251020133207-084a437033b4 Advisory →

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    SUSE neuvector 0.0.0-20251020133207-084a437033b4, 5.3.5, 5.4.7

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2025-34266 NeuVector Enforcer is vulnerable to Command Injection and Buffer overflowPriority MEDIUM 43
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-54470
  2. 2026-10-03 Alias added: GHSA-qqj3-g7mx-5p4w

References

Advisory 1

Other 5

  • TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
See all 1331 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences