CVE-2025-67108

Critical · CVSS 10.0

eProsima Fast-DDS — Improper validation of ticket revocation leading to insecure communications (CWE-298, CWE-370)

CVSS: 10.0; nvd
EPSS: 0.29%; 21th pct
KEV: No
Class: oss containerizable; CWE-298, CWE-370

Description

eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.

Search profile — drives PoC discovery

Symbols Permissions.cppL263accesscontrolticket revocationFast-DDS securityeProsima Fast-DDS v3.3

Keywords CVE-2025-67108eProsima Fast-DDSFast-DDS v3.3ticket revocationimproper validationCWE-298CWE-370Permissions.cppaccesscontrolDDS securityinsecure communicationsoss containerizableFast-DDS PoC

Versions: v3.3

References

https://gist.github.com/lkloliver/81b5d5a8328d712dbfd497bf11dbe913
https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/security/accesscontrol/Permissions.cpp#L263

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T06:30:39.000Z