https://seclists.org/oss-sec/2026/q1/172: CVE-2026-25506: MUNGE 0.5-0.5.17 buffer overflow allowing key leakage
Published Feb 17, 2026
·Updated
Affected Software
1 affected component
MUNGE MUNGE>=0.5<=0.5.17
Frequently Asked Questions
1
What is the severity of CVE-2026-25506?
CVE-2026-25506 is rated as a high-severity vulnerability due to the potential for key leakage and subsequent impersonation.
2
How do I fix CVE-2026-25506?
To mitigate CVE-2026-25506, upgrade MUNGE to the latest version that addresses the buffer overflow vulnerabilities.
3
Who is affected by CVE-2026-25506?
Local users of MUNGE versions 0.5 to 0.5.17 are affected by CVE-2026-25506, which allows them to potentially leak cryptographic keys.
4
What types of attacks can be performed using CVE-2026-25506?
An attacker can exploit CVE-2026-25506 to leak cryptographic key material and forge MUNGE credentials to impersonate legitimate users.
5
Is there a workaround for CVE-2026-25506?
A temporary workaround for CVE-2026-25506 may involve restricting local access to the MUNGE daemon until a patch is applied.