CVE-2025-9513: editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption

Severity: low (CVSS 3.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-27 · updated 2026-06-17
Weakness: CWE-310

Description

A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs. This manipulation of the argument priv_key causes inadequate encryption strength. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is reported as difficult.

Affected products

editso fuso: 1.0.4-beta.0, 1.0.4-beta.1, 1.0.4-beta.2, 1.0.4-beta.3, 1.0.4-beta.4, 1.0.4-beta.5 (+2)

References

https://chatgpt.com/share/68ae1bfa-8cd4-8005-8add-969bc42047b4
https://vuldb.com/?ctiid.321506
https://vuldb.com/?id.321506
https://vuldb.com/?submit.635449

Get alerted when CVE-2025-9513 or the next vulnerability affects your stack