CVE-2025-54470
published 2025-10-30CVE-2025-54470: This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends…
PriorityP347high8.6CVSS 3.1
AVNACLPRNUINSUCLILAH
EPSS
0.18%
7.6th percentile
This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server.
In affected versions, NeuVector does not enforce TLS
certificate verification when transmitting anonymous cluster data to the
telemetry server. As a result, the communication channel is susceptible
to man-in-the-middle (MITM) attacks, where an attacker could intercept
or modify the transmitted data. Additionally, NeuVector loads the
response of the telemetry server is loaded into memory without size
limitation, which makes it vulnerable to a Denial of Service(DoS)
attack
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | neuvector_neuvector | >= 0.0.0-20230727023453-1c4957d53911 < 0.0.0-20251020133207-084a437033b4 | 0.0.0-20251020133207-084a437033b4 |
| github.com | neuvector_neuvector | >= 5.3.0 < 5.3.5 | 5.3.5 |
| github.com | neuvector_neuvector | >= 5.4.0 < 5.4.7 | 5.4.7 |
| suse | neuvector | >= 0.0.0-20230727023453-1c4957d53911 < 0.0.0-20251020133207-084a437033b4 | 0.0.0-20251020133207-084a437033b4 |
| suse | neuvector | >= 5.3.0 < 5.3.5 | 5.3.5 |
| suse | neuvector | >= 5.4.0 < 5.4.7 | 5.4.7 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
NeuVector telemetry sender is vulnerable to MITM and DoS in github.com/neuvector/neuvector
osv·2025-10-30
CVE-2025-54470 NeuVector telemetry sender is vulnerable to MITM and DoS in github.com/neuvector/neuvector
NeuVector telemetry sender is vulnerable to MITM and DoS in github.com/neuvector/neuvector
NeuVector telemetry sender is vulnerable to MITM and DoS in github.com/neuvector/neuvector
GHSA
NeuVector telemetry sender is vulnerable to MITM and DoS
ghsa·2025-10-21
CVE-2025-54470 [HIGH] CWE-295 NeuVector telemetry sender is vulnerable to MITM and DoS
NeuVector telemetry sender is vulnerable to MITM and DoS
### Impact
This vulnerability affects NeuVector deployments only when the `Report anonymous cluster data option` is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server at `https://upgrades.neuvector-upgrade-responder.livestock.rancher.io`.
In affected versions, NeuVector does not enforce TLS certificate verification when transmitting anonymous cluster data to the telemetry server. As a result, the communication channel is susceptible to man-in-the-middle (MITM) attacks, where an attacker could intercept or modify the transmitted data. Additionally, NeuVector loads the response of the telemetry server is loaded into memory without size limitation, which makes it vulnerable to a Deni
OSV
NeuVector telemetry sender is vulnerable to MITM and DoS
osv·2025-10-21
CVE-2025-54470 [HIGH] NeuVector telemetry sender is vulnerable to MITM and DoS
NeuVector telemetry sender is vulnerable to MITM and DoS
### Impact
This vulnerability affects NeuVector deployments only when the `Report anonymous cluster data option` is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server at `https://upgrades.neuvector-upgrade-responder.livestock.rancher.io`.
In affected versions, NeuVector does not enforce TLS certificate verification when transmitting anonymous cluster data to the telemetry server. As a result, the communication channel is susceptible to man-in-the-middle (MITM) attacks, where an attacker could intercept or modify the transmitted data. Additionally, NeuVector loads the response of the telemetry server is loaded into memory without size limitation, which makes it vulnerable to a Deni
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-10-30
Published