wolfSSL vulnerabilities

🔔 Create alert RSS

Published CVEs affecting wolfSSL products: 102 record(s), with severity, exploitation and fixes.

Wolfssl 89 wolfSSH 9 Wolfengine 2 wolfSSL (wolfCrypt) 1 wolfSSL-py 1 Wolfprovider 1

Exploited only (KEV) →

CVE-2025-11935 High · 7.5 CWE-326 Nov 21, 2025

Forward Secrecy Violation in WolfSSL TLS 1.3

With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS (perfect forward secrecy) and the client would continue on with the connection using PSK without PFS. This happened when a server responded to a ClientHello containing psk_dhe_ke without a key_share extension. The re-use of an authenticated PSK connection that on the clients side unexpectedly did not have PFS, reduces the security of the connection.

CVE-2025-11625 Critical · 9.8 CWE-287 Oct 21, 2025

Host verification bypass and credential leak

Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of clients credentials.