# CVE-2025-11625: Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication…

Source: https://junglewise.ai/threats/cve-2025-11625-improper-host-authentication-vulnerability-in-wolfssh-version-1-4  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-10-21  
License: CC BY 4.0 with a link back

CVE-2025-11625 · Severity: critical · CVSS 9.8 · Published 2025-10-21

Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of clients credentials.

Technologies: [Wolfssh](https://junglewise.ai/threats/technologies/wolfssh). Vendors: [Wolfssh](https://junglewise.ai/threats/vendors/wolfssh).

## Quick answers

**Is CVE-2025-11625 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-11625 being exploited in the wild.

**How severe is CVE-2025-11625?** Critical severity, with a CVSS score of 9.8, published 21 October 2025.

**Which products and versions are affected?** Wolfssh. The advisory does not name versions.

**Is there a fix for CVE-2025-11625?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-11625?** Check whether you run Wolfssh. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Wolfssh

## Related threats

- [Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated…](https://junglewise.ai/threats/cve-2026-0930-potential-read-out-of-bounds-case-with-wolfsshd-on-windows-while)
- [A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote…](https://junglewise.ai/threats/cve-2025-15382-a-heap-buffer-over-read-vulnerability-exists-in-the-wolfssh)
- [wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client…](https://junglewise.ai/threats/cve-2025-14942-wolfssh-s-key-exchange-state-machine-can-be-manipulated-to-leak)
- [Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size…](https://junglewise.ai/threats/cve-2025-11624-potential-stack-buffer-overwrite-on-the-sftp-server-side-when)