Executive brief
NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) in github.com/neuvector/neuvector
Affected products
- Go github.com/neuvector/neuvector
Junglewise Threat Intelligence
CVE-2025-66001: GO-2025-4235 - NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) in github.com/neuvector/neuvector
CVE-2025-66001 · Severity: low · CVSS 3.1 · Published 2025-12-15
Technologies: github.com/neuvector/neuvector (Go). Vendors: Go.
Related threats
- GO-2025-4043 - NeuVector is shipping cryptographic material into its binary in github.com/neuvector/neuvector
- GO-2025-4042 - NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow in github.com/neuvector/neuvector
- SUSE NeuVector MITM and DoS in telemetry sender
- SUSE NeuVector insecure default password for admin account
- SUSE NeuVector sensitive information disclosure in security event logs