CVE-2026-48025
nebula-mesh: Decrypted CA private key persists in heap after signing
Description
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the plaintext ed25519.PrivateKey after unwrapping via the master key; internal/pki/ca.go:13-16 stores it. Callers at internal/api/enroll.go:116, internal/api/updates.go:297, and internal/api/mobile_bundle.go:40 use the manager for one Sign() and drop the reference on function return — but the underlying slice contents are not wiped before release. The keystore package's contract (internal/keystore/keystore.go doc: "Callers MUST zeroise the returned plaintext DEK as soon as it is no longer needed") is not met by the CAManager consumer. Decrypted CA private keys persist in process heap until Go's GC scavenges the underlying slice — minutes to hours under load, indefinitely on idle servers. This issue has been patched in version 0.3.7.
INFO
Published Date :
July 28, 2026, 6:17 p.m.
Last Modified :
Oct. 23, 2026, 11:10 p.m.
Remotely Exploit :
Yes !
Source :
[email protected]
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 4.0 | MEDIUM | [email protected] |
Solution
- Update nebula-mesh to version 0.3.7 or later.
- Ensure private keys are zeroized after use.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-48025.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-48025 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-48025
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-48025 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-48025 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 23, 2026
Action Type Old Value New Value Added Translation Title: nebula-mesh de juev, Description: nebula-mesh es un plano de control autoalojado para la red privada virtual de malla Slack Nebula. Antes de la versión 0.3.7, internal/pki/resolver.go:36-64 construye un CAManager con la clave privada ed25519.PrivateKey en texto plano después de desempaquetar a través de la clave maestra; internal/pki/ca.go:13-16 la almacena. Las funciones que llaman en internal/api/enroll.go:116, internal/api/updates.go:297, e internal/api/mobile_bundle.go:40 usan el gestor para una única operación Sign() y eliminan la referencia al retornar la función - pero el contenido del slice subyacente no se borra antes de su liberación. El contrato del paquete keystore (documentación de internal/keystore/keystore.go: ’Las funciones que llaman DEBEN poner a cero la DEK en texto plano devuelta tan pronto como ya no sea necesaria’) no es cumplido por el consumidor de CAManager. Las claves privadas de CA descifradas persisten en el heap del proceso hasta que el recolector de basura (GC) de Go recolecta el slice subyacente - de minutos a horas bajo carga, indefinidamente en servidores inactivos. Este problema ha sido parcheado en la versión 0.3.7. -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jul. 29, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2026-48025', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'yes'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2026-07-29T13:54:53.423099Z'} -
New CVE Received by [email protected]
Jul. 28, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'juev', 'product': 'nebula-mesh', 'versions': [{'status': 'affected', 'version': '< 0.3.7'}]}] Added Description nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the plaintext ed25519.PrivateKey after unwrapping via the master key; internal/pki/ca.go:13-16 stores it. Callers at internal/api/enroll.go:116, internal/api/updates.go:297, and internal/api/mobile_bundle.go:40 use the manager for one Sign() and drop the reference on function return — but the underlying slice contents are not wiped before release. The keystore package's contract (internal/keystore/keystore.go doc: "Callers MUST zeroise the returned plaintext DEK as soon as it is no longer needed") is not met by the CAManager consumer. Decrypted CA private keys persist in process heap until Go's GC scavenges the underlying slice — minutes to hours under load, indefinitely on idle servers. This issue has been patched in version 0.3.7. Added CVSS V4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added CWE CWE-244 Added Reference https://github.com/forgekeep/nebula-mesh/commit/bca1d5914fbaf3517d3b86145a802c00de4a8122 Added Reference https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.7 Added Reference https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-8h84-fhqq-q58v