CVE-2025-23390
Fleet doesn’t validate a server’s certificate when connecting through SSH
Published Oct 15, 2026 · updated Oct 15, 2026 · SUSE fleet
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In case the server that is being connected to has a trusted entry in the known_hosts file, then Fleet will correctly check the authenticity of the presented certificate.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · NIST NVD
Detected
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In case the server that is being connected to has a trusted entry in the known_hosts file, then Fleet will correctly c
Oct 15, 2026 · NIST NVD
Updated
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In case the server that is being connected to has a trusted entry in the known_hosts file, then Fleet will correctly c
Affected
- vendor SUSE fleetversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2025-23390
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2025-23390
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2025-23390
30-day exploitation probability 0.2%
first.org - NIST NVDVulnerability recordCVE-2025-23390
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the file. This could allow the execution of a man-in-the-middle (MitM) attack
nvd.nist.gov