Vulnerability · Published Jan 21, 2026 · Assigned by GitHub_M

CVE-2025-68134EVerest's use of assert functions can potentially lead to denial of service

High 7.4

In plain English

A high-severity improper input validation in everest-core from EVerest. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)7.4High

Exploit odds (30 days)0.2%top 92.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

EVerest is an EV charging software stack. Prior to version 2025.10.0, the use of the `assert` function to handle errors frequently causes the module to crash. This is particularly critical because the manager shuts down all other modules and exits when any one of them terminates, leading to a denial of service. In a context where a manager handles multiple EVSE, this would also impact other users. Version 2025.10.0 fixes the issue.

Affected products (as reported)

Vendor	Product	Versions
EVerest	everest-core	< 2025.10.0

Weakness: CWE-20 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References

https://github.com/EVerest/everest-core/security/advisories/GHSA-cxc5-rrj5-8pf3 x_refsource_CONFIRM