CVE-2025-54471
NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data.
| Software | From | Fixed in |
|---|---|---|
github.com/neuvector/neuvector
|
5.3.0 | 5.4.7 |
|
github.com/neuvector/neuvector
|
0.0.0-20230727023453-1c4957d53911 | 0.0.0-20251020133207-084a437033b4 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime