AMD KVM Key Download EUVD-2025-209846

Exploitation requires authenticated local or network access to the KVM key download component (PR:L per CVSS vector). The attacker must be able to initiate token-based authentication to the KVM service and possess knowledge of or ability to intercept/manipulate tokens belonging to other users or VMs. The vulnerability is limited to environments where KVM key download functionality is enabled and accessible to multiple authenticated users; single-user systems or air-gapped deployments with restricted network access face lower practical risk. AC:H suggests additional constraints such as specific timing, race conditions, or non-standard configurations may be required for successful exploitation.

CVSS 6.0 (Medium) with CVSS:4.0 vector indicates remote network access (AV:N) but requires authentication (PR:L) and high attack complexity (AC:H), limiting practical exploitation surface. The high confidentiality impact (VC:H) signals meaningful real-world risk - successful exploitation leads to key theft rather than system compromise. No KEV status, POC, or EPSS data provided. The AC:H rating suggests exploitation requires specific conditions or timing, potentially reducing real-world likelihood despite network reachability. Risk is elevated in environments where multiple users or tenants share KVM infrastructure, but reduced in single-user or air-gapped deployments. Confidence in severity assessment is moderate pending confirmation of actual exploitability and prevalence of affected configurations.

An authenticated user on a shared virtualization host crafts a malicious token substitution request to the KVM key download service, swapping their authentication token with another user's or VM's token. The improper privilege checks allow the request to succeed, and the attacker downloads the target's cryptographic keys. In a cloud or multi-tenant environment, this could expose encryption keys used to protect other customers' data.