CVE-2025-44005 | smallstep Step-CA 0.28.3/0.28.4 improper authorization (TALOS-2025-2242)

A vulnerability was found in smallstep Step-CA 0.28.3/0.28.4 and classified as critical. Affected is an unknown function. The manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2025-44005. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More