CVE-2025-2886

Summary

CVE-2025-2886 is a vulnerability affecting certain implementations of a client-side software. This issue arises when the client fails to validate terminating delegations in a list, causing it to continue searching even after encountering a terminating delegation. The consequence of this behavior is that the client may fetch a target from an incorrect source, potentially leading to altered target contents. To mitigate this risk, users are advised to upgrade to the latest version 0.20.0 or higher of the affected software and ensure any forked or derivative code is patched accordingly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.