CVE-2025-25176
CriticalSummary
Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform.
Risk Assessment
Exfiltration of data from secure workloads can compromise the confidentiality of processed information, potentially leading to leakage of sensitive data or keys.
Recommendation
Apply security patches provided by the platform vendor. Restrict running applications in the non-secure environment and monitor for unusual behavior.
Other vulnerabilities in Platform
See all- CVE-2025-57213High
Incorrect access control in the orderService.queryObject component of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
- CVE-2025-57212High
Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
- CVE-2025-57210High
Incorrect access control in the ApiPayController.java component of platform v1.0.0 allows attackers to access sensitive information via unspecified vectors.
- CVE-2025-54548Medium
On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes).
Original NVD description (English source)
Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS