CVE-2025-15444
Last modified
CVE-2025-15444 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium <= 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://www.cve.org/CVERecord?id=CVE-2025-69277 . The libsodium vulnerability states: In atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. 0.000042 includes a version of libsodium updated to 1.0.20-stable, released January 3, 2026, which includes a fix for the vulnerability.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium <= 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://www.cve.org/CVERecord?id=CVE-2025-69277 . The libsodium vulnerability states: In atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. 0.000042 includes a version of libsodium updated to 1.0.20-stable, released January 3, 2026, which includes a fix for the vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Iamb | Crypt\ | < 0.000042 | Sodium\ |
References
- https://00f.net/2025/12/30/libsodium-vulnerability/Third Party Advisory
- https://metacpan.org/dist/Crypt-Sodium-XS/changesProduct, Release Notes
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-15444?
How severe is CVE-2025-15444?
How do I fix CVE-2025-15444?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-15439A vulnerability was identified in Daptin 0.10.3. Affected by…6.3
- CVE-2025-1544A vulnerability, which was classified as critical, was found…6.3
- CVE-2025-15440The iONE360 configurator plugin for WordPress is vulnerable…7.2
- CVE-2025-15441The Form Maker by 10Web WordPress plugin before 1.15.38 doe…6.8
- CVE-2025-15442A vulnerability was determined in CRMEB up to 5.6.1. This vu…7.2
- CVE-2025-15443A vulnerability was identified in CRMEB up to 5.6.1. This is…7.2
- CVE-2025-15445The Restaurant Cafeteria WordPress theme through 0.4.6 expos…5.4
- CVE-2025-15446Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
- CVE-2025-15447Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
- CVE-2025-15448A vulnerability was found in cld378632668 JavaMall up to 994…9.8
- CVE-2025-15449A vulnerability was determined in cld378632668 JavaMall up t…9.1
- CVE-2025-1545An XPath Injection vulnerability in WatchGuard Fireware OS m…7.5
Are you affected by CVE-2025-15444?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST