VyOS vulnerabilities
We track 1 vulnerability in VyOS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2025.
1vulnerabilities
1critical
0high
0exploited
9.0average CVSS score
Latest VyOS vulnerabilities
- 9.0 Critical severity
VyOS: Use of Hard-coded Cryptographic Key
VyOS 1.3 through 1.5 (fixed in 1.4.2) or any Debian-based system using dropbear in combination with live-build has the same Dropbear private host keys across different installations. Thus, an attacker can conduct active man-in-the-middle attacks against SSH co