CVE-2026-60007
7.4 HIGHpublic exploit availablePublished 2026-08-04 · Updated 2026-08-05
AI risk analysis
- Summary
- The flaw allows an attacker to perform a padding oracle attack on RSA PKCS#1 v1.5 padding in `Basic128Rsa15`-encrypted username tokens, enabling password recovery and unauthorized access.
- Exploitability
- Exploitation requires capturing the victim's token and sending repeated unauthenticated `ActivateSession` requests; on-path attacker position is necessary.
- Blast radius
- If exploited, this could lead to full compromise of affected Eclipse Milo systems, including potential unauthorized access by attackers.
- Prioritized remediation
- Update to Eclipse Milo versions later than 1.1.4 immediately.
auth-bypasspadding-oraclersaencryption
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's `Basic128Rsa15`-encrypted username token to use repeated unauthenticated `ActivateSession` requests as a padding oracle, recover the victim's password, and authenticate with the recovered credentials.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-204
Vendors
eclipse
Products
milo
Public exploit & PoC references
References
- https://github.com/eclipse-milo/milo/commit/db59fae993a3a1bc66fffc8a2796d444b40285fb Patch
- https://gitlab.eclipse.org/security/cve-assignment/-/work_items/183 Issue Tracking, Patch, Vendor Advisory
- https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598 Issue Tracking, Vendor Advisory
Data: NVD (public domain). Analysis: local $0 model. Defensive use only.