CVE-2025-25204

`gh` is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool `gh attestation verify` causes it to return a zero exit status when no attestations are present. This behavior is incorrect: When no attestations are present, `gh attestation verify` should return a non-zero exit status code, thereby signaling verification failure. An attacker can abuse this flaw to, for example, deploy malicious artifacts in any system that uses `gh attestation verify`'s exit codes to gatekeep deployments. Users are advised to update `gh` to patched version `v2.67.0` as soon as possible.

• CWE-390

• https://github.com/cli/cli/issues/10418
• https://github.com/cli/cli/pull/10421
• https://github.com/cli/cli/security/advisories/GHSA-fgw4-v983-mgp8

Published

Feb 14, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-25199go-crypto-winnative Go crypto backend for Windows using Cryp…7.5
• CVE-2025-2520The Honeywell Experion PKS contains an Uninitialized Variabl…7.5
• CVE-2025-25200Koa is expressive middleware for Node.js using ES2017 async …7.5
• CVE-2025-25201Nitrokey 3 Firmware is the the firmware of Nitrokey 3 USB ke…4
• CVE-2025-25202Ash Authentication is an authentication framework for Elixir…6.5
• CVE-2025-25203CtrlPanel is open-source billing software for hosting provid…8.1
• CVE-2025-25205Audiobookshelf is a self-hosted audiobook and podcast server…8.2
• CVE-2025-25206eLabFTW is an open source electronic lab notebook for resear…8.8
• CVE-2025-25207The Authorino service in the Red Hat Connectivity Link is th…5.7
• CVE-2025-25208A Developer persona can bring down the Authorino service, pr…5.7
• CVE-2025-25209The AuthPolicy metadata on Red Hat Connectivity Link contain…5.7
• CVE-2025-2521The Honeywell Experion PKS and OneWireless WDM contains a Me…8.6