Smallstep Certificates vulnerabilities
3 known vulnerabilities affecting smallstep/certificates.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1LOW1
Vulnerabilities
Page 1 of 1
CVE-2026-30836P3CRITICALCVSS 10.0fixed in 0.30.02026-03-19
CVE-2026-30836 [CRITICAL] CWE-287 CVE-2026-30836: Step CA is an online certificate authority for secure, automated certificate management for DevOps.
Step CA is an online certificate authority for secure, automated certificate management for DevOps. Versions 0.30.0-rc6 and below do not safeguard against unauthenticated certificate issuance through the SCEP UpdateReq. This issue has been fixed in version 0.30.0.
nvd
CVE-2025-66406P4MEDIUMCVSS 5.0fixed in 0.29.02025-12-03
CVE-2025-66406 [MEDIUM] CWE-863 CVE-2025-66406: Step CA is an online certificate authority for secure, automated certificate management for DevOps.
Step CA is an online certificate authority for secure, automated certificate management for DevOps. Prior to 0.29.0, there is an improper authorization check for SSH certificate revocation. This affects deployments configured with the SSHPOP provisioner. This vulnerability is fixed in 0.29.0.
nvd
CVE-2026-40097P4LOWCVSS 3.7v>= 0.24.0, < 0.30.0-rc32026-04-10
CVE-2026-40097 [LOW] CWE-129 CVE-2026-40097: Step CA is an online certificate authority for secure, automated certificate management for DevOps.
Step CA is an online certificate authority for secure, automated certificate management for DevOps. From 0.24.0 to before 0.30.0-rc3, an attacker can trigger an index out-of-bounds panic in Step CA by sending a crafted attestation key (AK) certificate with an empty Extended Key Usage (EKU) extension during TPM device attestation. When processing a devic
nvd