Vulnerability · Published Aug 27, 2025 · Assigned by VulDB

CVE-2025-9513editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption

Low 3.7

In plain English

A low-severity security flaw in fuso from editso. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low

Exploit odds (30 days)0.2%top 94.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs. This manipulation of the argument priv_key causes inadequate encryption strength. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is reported as difficult.

Affected products (as reported)

Vendor	Product	Versions
editso	fuso	1.0.4-beta.01.0.4-beta.11.0.4-beta.21.0.4-beta.31.0.4-beta.41.0.4-beta.51.0.4-beta.61.0.4-beta.7

Weakness: CWE-326, CWE-310 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R

References

VDB-321506 | editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption vdb-entry, technical-description
VDB-321506 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #635449 | editso fuso dev CWE-326: Inadequate Encryption Strength third-party-advisory
https://chatgpt.com/share/68ae1bfa-8cd4-8005-8add-969bc42047b4 related