CVE-2026-4541 | janmojzis tinyssh up to 20250501 Ed25519 Signature crypto_sign_ed25519_tinyssh.c signature verification (Issue 101)

March 21, 2026 Yanac

A vulnerability was found in janmojzis tinyssh up to 20250501. It has been classified as problematic. Impacted is an unknown function of the file tinyssh/crypto_sign_ed25519_tinyssh.c of the component Ed25519 Signature Handler. This manipulation causes improper verification of cryptographic signature.

This vulnerability is tracked as CVE-2026-4541. The attack is restricted to local execution. Moreover, an exploit is present.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More