Vulnerabilities

TI-2026-28924 CVE-2026-40097 · GHSA-9qq8-cgcv-qmc9

Step CA affected by an index out of bounds panic in TPM attestation EKU validation

LOW 17

Step CA is an online certificate authority for secure, automated certificate management for DevOps.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00188 Published 2026-04-10 Fixed in 0.30.0-rc3, 0.30.0 CWE-129

TI-2026-23665 CVE-2026-30836 · GHSA-q4r8-xm5f-56gw

Step CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)

MEDIUM 49

Step CA is an online certificate authority for secure, automated certificate management for DevOps.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00308 Published 2026-03-19 Fixed in 0.30.0 CWE-287

TI-2025-28554 CVE-2025-44005 · GHSA-h8cp-697h-8c8p

Improper authentication in smallstep Step-CA

HIGH 82

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.09091 Published 2025-12-17 Fixed in 0.29.0 CWE-287

TI-2025-40843 CVE-2025-66406 · GHSA-j7c9-79x7-8hpr

Improper Authorization Check for SSH Certificate Revocation

LOW 22

Step CA is an online certificate authority for secure, automated certificate management for DevOps.

CVSS 3.1MEDIUM 5.0 Network High privileges No interaction EPSS 0.00162 Published 2025-12-03 Fixed in 0.29.0 CWE-863

Vulnerabilities

Filters

Step CA affected by an index out of bounds panic in TPM attestation EKU validation

Step CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)

Improper authentication in smallstep Step-CA

Improper Authorization Check for SSH Certificate Revocation