Cosmwasm
1 CVEs
product
Monthly
An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Cosmwasm
NVD
GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2025-25500
Cargo
EPSS 1%
CVSS 7.5
HIGH
PATCH
This Week
An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Cosmwasm
NVD
GitHub