libsodium before ad3004e, in atypical use cases involving certain custom cryptography or…
Priority LOW 20CWE-184Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Partial Red Hat: 1 fixed, 12 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat.
Summary
libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00182 7th percentileScored 2026-11-07
Fix Partial paragonie/sodium_compat (Packagist): 2.5.0, 1.24.0PyNaCl (PyPI): 1.6.2+1 more productRed Hat: 1 advisoryRed Hat: 1 fixed, 12 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | paragonie/sodium_compat (Packagist) | 2 to before 2.5.0 | 2.5.0 | Patch available | GHSA-mrfv-m5wm-5w6w |
| — | paragonie/sodium_compat (Packagist) | before 1.24.0 | 1.24.0 | Patch available | GHSA-mrfv-m5wm-5w6w |
| — | PyNaCl (PyPI) | before 1.6.2 | 1.6.2 | Patch available | GHSA-mrfv-m5wm-5w6w |
| — | hdwallet (PyPI) | before 3.6.1 | 3.6.1 | Patch available | GHSA-mrfv-m5wm-5w6w |
- paragonie/sodium_compat (Packagist) Vendor— Affected 2 to before 2.5.0 Fixed in 2.5.0 Patch available GHSA-mrfv-m5wm-5w6w
- paragonie/sodium_compat (Packagist) Vendor— Affected before 1.24.0 Fixed in 1.24.0 Patch available GHSA-mrfv-m5wm-5w6w
- PyNaCl (PyPI) Vendor— Affected before 1.6.2 Fixed in 1.6.2 Patch available GHSA-mrfv-m5wm-5w6w
- hdwallet (PyPI) Vendor— Affected before 3.6.1 Fixed in 3.6.1 Patch available GHSA-mrfv-m5wm-5w6w
Remediation
- Fix · GHSA-mrfv-m5wm-5w6w paragonie/sodium_compat (Packagist) Fixed in 2.5.0 Advisory →
- Fix · GHSA-mrfv-m5wm-5w6w paragonie/sodium_compat (Packagist) Fixed in 1.24.0 Advisory →
- Fix · GHSA-mrfv-m5wm-5w6w PyNaCl (PyPI) Fixed in 1.6.2 Advisory →
- Fix · GHSA-mrfv-m5wm-5w6w hdwallet (PyPI) Fixed in 3.6.1 Advisory →
Red Hat 1 advisory
- RHSA-2026:7369 Released 2026-04-10 · Red Hat rating ModerateRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images libsodium-1.0.22-1.hum1@aarch64, libsodium-1.0.22-1.hum1@src, libsodium-1.0.22-1.hum1@x86_64 +8
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Migration Toolkit for Containers | Affected | No fix yet: Fix deferred |
| OpenShift Service Mesh 2 | Affected | No fix yet: Fix deferred |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet: Fix deferred |
| Red Hat Ansible Automation Platform Ansible Core 2 | Affected | No fix yet: Fix deferred |
| Red Hat Developer Hub 1 | Affected | No fix yet: Fix deferred |
| Red Hat Discovery 2 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet: Fix deferred |
| Red Hat OpenStack Platform 16.2 | Affected | No fix yet: Fix deferred |
| Red Hat OpenStack Platform 17.1 | Affected | No fix yet: Fix deferred |
| Red Hat OpenStack Platform 18.0 | Affected | No fix yet: Fix deferred |
| Red Hat Quay 3 | Affected | No fix yet: Fix deferred |
| Red Hat Satellite 6 | Affected | No fix yet: Fix deferred |
| Red Hat Hardened Images | Fixed | RHSA-2026:7369 |
Timeline
- 2026-10-02 Threatist record created from CVE-2025-69277
- 2026-10-03 Alias added: GHSA-mrfv-m5wm-5w6w
- 2026-10-27 Affected versions changed · Red Hat
References
Other 14
- https://github.com/jedisct1/libsodium/commit/ad3004ec8731730e93fcfbbc824e67eadc1c1bae
- https://00f.net/2025/12/30/libsodium-vulnerability/
- https://news.ycombinator.com/item?id=46435614
- https://ianix.com/pub/ed25519-deployment.html
- https://github.com/pyca/pynacl/issues/920
- https://github.com/pyca/pynacl/commit/ecf41f55a3d8f1e10ce89c61c4b4d67f3f4467cf
- https://github.com/pyca/pynacl/commit/96314884d88d1089ff5f336dba61d7abbcddbbf7
- https://github.com/hdwallet-io/python-hdwallet/pull/124
- https://github.com/paragonie/sodium_compat/commit/2cb48f26130919f92f30650bdcc30e6f4ebe45ac
- https://github.com/paragonie/sodium_compat/commit/4714da6efdc782c06690bc72ce34fae7941c2d9f
- https://00f.net/2025/12/30/libsodium-vulnerability
- https://github.com/FriendsOfPHP/security-advisories/blob/master/paragonie/sodium_compat/2025-12-30.yaml
- https://github.com/paragonie/sodium_compat
- https://lists.debian.org/debian-lts-announce/2026/01/msg00004.html
Sources
- CVE-2025-69277 · CVE Program
- CVE-2025-69277 · NVD
- FIRST EPSS
- GHSA-mrfv-m5wm-5w6w · GitHub Advisory Database · CC BY 4.0
- CVE-2025-69277 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences