CVE-2025-68402

High

Published: 09/03/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

FreshRSS, a free self-hostable RSS aggregator, contains a vulnerability in development versions (from 57e1a37 to 00f2f04) where the nonce length was changed from 40 to 64 characters. password_verify() is called with a constructed string (SHA-256 nonce + part of a bcrypt hash) instead of the raw user password. Due to bcrypt's 72-byte input truncation, password verification may succeed even when the user enters an incorrect password.

Risk Assessment

The risk is that an unauthorized user may gain access to an account by providing an incorrect password, potentially leading to account takeover and data confidentiality breach. The vulnerability only affects the edge branch, not stable releases.

Recommendation

Immediately update FreshRSS to version 1.27.2-dev (commit 476e57b) or later if you are using the edge branch. If you are using a stable release, no action is required, but monitor for updates.

Other vulnerabilities in FreshRSS

CVE-2025-68932Critical
FreshRSS prior to version 1.28.0 uses cryptographically weak random number generators (mt_rand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to account takeover through persistent session hijacking.

Original NVD description (English source)

FreshRSS is a free, self-hostable RSS aggregator. From 57e1a37 - 00f2f04, the lengths of the nonce was changed from 40 chars to 64. password_verify() is currently being called with a constructed string (SHA-256 nonce + part of a bcrypt hash) instead of the raw user password. Due to bcrypt’s 72-byte input truncation, this causes password verification to succeed even when the user enters an incorrect password. This vulnerability is fixed in 1.27.2-dev (476e57b). The issue was only present in the edge branch and never in a stable release.