Vulnerability · Published Aug 7, 2025 · Assigned by GitHub_M

CVE-2025-54882Himmelblau's Kerberos credential cache collection is world readable

High 7.1

In plain English

A high-severity security flaw in himmelblau from himmelblau-idm. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)0.2%top 85.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials are stored as world readable. This is fixed in versions 0.9.22 and 1.2.0. To work around this issue, remove all read access to Himmelblau caches for all users except for owners.

Affected products (as reported)

Vendor	Product	Versions
himmelblau-idm	himmelblau	>= 0.8.0, < 0.9.22>= 1.0.0-beta, < 1.2.0

Weakness: CWE-522 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-phfx-rjfw-wj83 x_refsource_CONFIRM
https://github.com/himmelblau-idm/himmelblau/commit/b562053df3dffb1dd9ab3d09af986886773be2ad x_refsource_MISC
https://github.com/himmelblau-idm/himmelblau/commit/faae58b0384aca8b21b4be5f1c507412eec3778a x_refsource_MISC
https://github.com/himmelblau-idm/himmelblau/releases/tag/0.9.22 x_refsource_MISC
https://github.com/himmelblau-idm/himmelblau/releases/tag/1.2.0 x_refsource_MISC