CVE-2025-46833
Last modified
CVE-2025-46833 is a medium-severity vulnerability rated 4.6/10 on the CVSS scale. Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been patched in commit 6ce60b1. A workaround involves increasing the key size, for RSA or DSA this is at least 2048 bits, for ECC this is at least 256 bits.
Metrics
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-46833?
How severe is CVE-2025-46833?
How do I fix CVE-2025-46833?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-46824The Discourse Code Review Plugin allows users to review GitH…3.1
- CVE-2025-46825Kanboard is project management software that focuses on the …5.4
- CVE-2025-46826insa-auth is an authentication server for INSA Rouen. A mino…1.3
- CVE-2025-46827Graylog is a free and open log management platform. Prior to…5.4
- CVE-2025-46828WeGIA is a web manager for charitable institutions. An unau…9.8
- CVE-2025-4683The MStore API – Create Native Android & iOS Apps On The Clo…4.3
- CVE-2025-46834Alchemy's Modular Account is a smart contract account that i…6.6
- CVE-2025-46835Git GUI allows you to use the Git source control management …8.5
- CVE-2025-46836net-tools is a collection of programs that form the base set…6.6
- CVE-2025-46837Adobe Experience Manager versions 6.5.22 and earlier are aff…8.7
- CVE-2025-46838Adobe Experience Manager versions 6.5.22 and earlier are aff…5.4
- CVE-2025-4684The BlockSpare: Gutenberg Blocks & Patterns for Blogs, Magaz…6.4
Are you affected by CVE-2025-46833?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST