Read the docs
TI-2025-38755 Aliases CVE-2025-62514

`libparsec_crypto` does not check for weak order point of curve 25519

Priority LOW 38CWE-1240Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-327.

Summary

Parsec is a cloud-based application for cryptographically secure file sharing. In versions on the 3.x branch prior to 3.6.0, `libparsec_crypto`, a component of the Parsec application, does not check for weak order point of Curve25519 when compiled with its RustCrypto backend. In practice this means an attacker in a man-in-the-middle position would be able to provide weak order points to both parties in the Diffie-Hellman exchange, resulting in a high probability to for both parties to obtain the same shared key (hence leading to a successful SAS code exchange, misleading both parties into thinking no MITM has occurred) which is also known by the attacker. Note only Parsec web is impacted (as Parsec desktop uses `libparsec_crypto` with the libsodium backend). Version 3.6.0 of Parsec patches the issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00302 23rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed parsec-cloud (Scille): 3.6.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Scilleparsec-cloud3.0.0-alpha to before 3.6.03.6.0Patch availableCNA
  • parsec-cloud VendorScille Affected 3.0.0-alpha to before 3.6.0 Fixed in 3.6.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:parsec.cloud:parsec:*:*:*:*:*:*:*:*3.0.0 to before 3.6.0VulnerableParsec.cloud
  • cpe:2.3:a:parsec.cloud:parsec:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.6.0 Vulnerable ·Parsec.cloud

Remediation

  • Fix · CNA parsec-cloud (Scille) Fixed in 3.6.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-62514

References

  • TI-2026-20224 The application evaluate UNC path in workspace name CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences