Skip to main content

CVE-2025-47914

CVE Details

Visit the official vulnerability details page for CVE-2025-47914 to learn more.

Initial Publication

11/19/2025

Last Update

12/11/2025

Third Party Dependency

golang.org/x/crypto

NIST CVE Summary

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

CVE Severity

5.3

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Analyzed

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
0.7.1⚠️ Impacted⚠️ Impacted
0.6.6⚠️ Impacted⚠️ Impacted
0.5.11⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.