EUVD-2026-23135
GHSA-6vgr-gf7r-f3jc
Severity by source
AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Lifecycle Timeline
6DescriptionCVE.org
Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.
AnalysisAI
Untrusted DLL search path vulnerability in Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 allows local attackers to achieve privilege escalation or code execution by placing a malicious DLL in a directory searched before the legitimate library location. The vulnerability requires local access and high complexity conditions but affects three widely-used FIDO2 authentication libraries; no public exploit code identified at time of analysis.
Technical ContextAI
The vulnerability stems from CWE-426 (Untrusted Search Path), a class of weakness where applications or libraries load dynamic libraries from directories without proper verification of their origin or integrity. On Windows systems, the Windows DLL search order typically includes the current working directory or user-writable directories before system directories, creating an opportunity for DLL hijacking. Yubico's libfido2 (C library), python-fido2 (Python bindings), and yubikey-manager (management utility) all interact with FIDO2 hardware tokens and cryptographic operations, making them targets for privilege escalation attacks. When these applications or libraries attempt to load required system or vendor DLLs, an attacker who controls a directory in the search path can substitute a malicious DLL, gaining execution context with the privileges of the calling process.
RemediationAI
Users must upgrade to patched versions: libfido2 version 1.17.0 or later, python-fido2 version 2.2.0 or later, and yubikey-manager version 5.9.1 or later. Organizations managing multiple deployment instances should prioritize yubikey-manager upgrades on administrative and secure-access workstations first, then deploy python-fido2 updates to development environments and libfido2 updates to systems integrating FIDO2 authentication. As a compensating control for environments with patching delays, restrict the working directories from which libfido2, python-fido2, or yubikey-manager are invoked - ensure these tools are only executed from protected system directories (System32, Program Files) with restricted write permissions, not from user home directories or shared network locations. Additionally, place the application's working directory outside any user-writable path; for Python environments, explicitly set PYTHONPATH and validate module load paths. Disable or restrict user ability to change working directory context for processes invoking these libraries. Monitor DLL load events via Windows Event Tracing or endpoint detection to identify suspicious DLL injection attempts. No active exploitation has been reported, so standard patch management timelines (30-60 days) are acceptable for non-critical systems; however, systems handling sensitive authentication (PIV/FIDO2 token management) should be patched within 14 days.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
Cross-user flow execution in Langflow (< 1.9.1) lets any authenticated API-key holder run another user's flow by passing
Same weakness CWE-426 – Untrusted Search Path
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today