CVE-2025-23020

Summary

CVE-2025-23020 is a recently disclosed vulnerability affecting Kwik before version 0.10.1. This issue involves a hash collision vulnerability in the hash table used to manage connections. Attackers can exploit this flaw by initiating connections with colliding Source Connection IDs (SCIDs), resulting in a significant increase in CPU load on the server. This type of attack, known as a Hash Denial of Service (DoS), can cause the server to become unresponsive or crash, leading to downtime and potential data loss.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.