Executive brief
MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun
Affected products
- Go github.com/edgelesssys/marblerun
Junglewise Threat Intelligence
GO-2025-3450 - MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun
Severity: info · Published 2025-02-05
Technologies: github.com/edgelesssys/marblerun (Go). Vendors: Go.
Related threats
- MarbleRun unauthenticated recovery allows Coordinator impersonation
- GO-2023-2378 - Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks
- GO-2024-2583 - Encryption bypass in github.com/edgelesssys/marblerun
- Transparent TLS may not be applied to Marbles with certain manifest configurations
- Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks