Log in Start free

Vulnerability · Published Nov 21, 2025 · Assigned by Ribose

CVE-2025-13470RNP 0.18.0 Vulnerable PKESK session keys

High 7.5

In plain English

A high-severity weak randomness in RNP from Ribose. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.3%top 74.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key (PKESK) packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release can be decrypted trivially by supplying an all-zero session key, fully compromising confidentiality. The vulnerability affects only public key encryption (PKESK packets).  Passphrase-based encryption (SKESK packets) is not affected. Root cause: Vulnerable session key buffer used in PKESK packet generation. The defect was introduced in commit `7bd9a8dc356aae756b40755be76d36205b6b161a` where initialization logic inside `encrypted_build_skesk()` only randomized the key for the SKESK path and omitted it for the PKESK path.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:14rnp0.18.1-1DEBIAN-CVE-2025-13470
Ubuntu:22.04:LTSrnpno fix listedUBUNTU-CVE-2025-13470
Ubuntu:24.04:LTSrnpno fix listedUBUNTU-CVE-2025-13470
Ubuntu:25.10rnpno fix listedUBUNTU-CVE-2025-13470
Ubuntu:26.04:LTSrnpno fix listedUBUNTU-CVE-2025-13470

Affected products (as reported)

VendorProductVersions
Ribose RNP 0.18.0

Weakness: CWE-330 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References