# CVE-2025-15382: A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote…

Source: https://junglewise.ai/threats/cve-2025-15382-a-heap-buffer-over-read-vulnerability-exists-in-the-wolfssh  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-01-06  
License: CC BY 4.0 with a link back

CVE-2025-15382 · Severity: high · CVSS 8.1 · Published 2026-01-06

A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte.

Technologies: [Wolfssh](https://junglewise.ai/threats/technologies/wolfssh). Vendors: [Wolfssh](https://junglewise.ai/threats/vendors/wolfssh).

## Quick answers

**Is CVE-2025-15382 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-15382 being exploited in the wild.

**How severe is CVE-2025-15382?** High severity, with a CVSS score of 8.1, published 6 January 2026.

**Which products and versions are affected?** Wolfssh. The advisory does not name versions.

**Is there a fix for CVE-2025-15382?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-15382?** Check whether you run Wolfssh. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Wolfssh

## Related threats

- [Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated…](https://junglewise.ai/threats/cve-2026-0930-potential-read-out-of-bounds-case-with-wolfsshd-on-windows-while)
- [wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client…](https://junglewise.ai/threats/cve-2025-14942-wolfssh-s-key-exchange-state-machine-can-be-manipulated-to-leak)
- [Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication…](https://junglewise.ai/threats/cve-2025-11625-improper-host-authentication-vulnerability-in-wolfssh-version-1-4)
- [Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size…](https://junglewise.ai/threats/cve-2025-11624-potential-stack-buffer-overwrite-on-the-sftp-server-side-when)