CVE-2025-21377

Summary

CVE-2025-21377 is a newly disclosed vulnerability affecting NTLM authentication, allowing an attacker to induce a target system to reveal NTLM hashes through spoofing. This issue can potentially lead to unauthorized access to systems and services that rely on NTLM for authentication. The vulnerability exists due to insufficient input validation, enabling attackers to manipulate NTLM responses and trigger hash disclosure. Organizations are recommended to apply the available patches or enable secure authentication protocols such as Kerberos to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.