What is CVE-2025-59036?

CVE-2025-59036 is a medium-severity vulnerability in Opsmill Infrahub, classified under Improper Validation of Certificate Expiration. CVSS score: 5.5/10. Published 2025-09-09.

How severe is CVE-2025-59036?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Opsmill Infrahub

CVE-2025-59036

Infrahub offers a central hub to manage data, templates, and playbooks. Prior to versiond 1.3.9 and 1.4.5, a bug in the authentication logic will cause API tokens that were deleted and/or expired to be considered valid. This means that any API token that is associated with an active user account can authenticate successfully. This issue is fixed in versions 1.3.9 and 1.4.5. As a workaround, users can delete or deactivate the account associated with a deleted API token to prevent that token from authenticating.

EPSS: 0.002 (8.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L.

Affected products

Opsmill Infrahub — versions < 1.3.9, >= 1.4.0, < 1.4.5

Weakness classification (CWE)

CWE-298 — Improper Validation of Certificate Expiration

References

security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2025-59036?: CVE-2025-59036 is a medium-severity vulnerability in Opsmill Infrahub, classified under Improper Validation of Certificate Expiration. CVSS score: 5.5/10. Published 2025-09-09.
How severe is CVE-2025-59036?: Medium severity. CVSS v3 base score is 5.5 out of 10.