# CWE-322.

Every Advisory and CVE whose sources give the weakness CWE-322, newest first.

## Records, newest first

- [Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts](https://agentprime.io/advisories/CVE-2026-94423.md)
  `CVE-2026-94423` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-322
- [Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no](https://agentprime.io/advisories/CVE-2026-94140.md)
  `CVE-2026-94140` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-322
- [Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default](https://agentprime.io/advisories/CVE-2026-94135.md)
  `CVE-2026-94135` · CVE record: Apache Software Foundation Apache Airflow SFTP provider · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-322
- [Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default](https://agentprime.io/advisories/CVE-2026-94134.md)
  `CVE-2026-94134` · CVE record: Apache Software Foundation Apache Airflow SSH provider and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-322
- [FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol](https://agentprime.io/advisories/CVE-2026-107675.md)
  `CVE-2026-107675` · CVE record: FFmpeg FFmpeg · CVSS 6.0 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-322
- [SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine](https://agentprime.io/advisories/CVE-2026-77703.md)
  `CVE-2026-77703` · CVE record: HAVELSAN Inc. Liman Render Engine · CVSS 5.9 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-322
- [TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension](https://agentprime.io/advisories/CVE-2026-89422.md)
  `CVE-2026-89422` · CVE record: Erlang OTP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-322
- [Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)](https://agentprime.io/advisories/GHSA-vjfw-cpmh-xwv3.md)
  `GHSA-vjfw-cpmh-xwv3`, `CVE-2026-11745` · Maven `com.linecorp.centraldogma:centraldogma-server-mirror-git`: affected `<0.84.0`, fixed in `0.84.0` · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-322
- [AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands](https://agentprime.io/advisories/GHSA-hqvf-45jj-mccq.md)
  `GHSA-hqvf-45jj-mccq`, `CVE-2026-18654`, `PYSEC-2026-3627` · PyPI `awscli`: affected `<1.45.28`, fixed in `1.45.28` · CVSS 6.9 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-322
- [Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification](https://agentprime.io/advisories/CVE-2026-58065.md)
  `CVE-2026-58065` · CVE record: Apache Software Foundation Apache Airflow Git provider · CVSS 8.1 High · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-322
- [Apache Airflow providers-google's \`ComputeEngineSSHHook\` disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path network att...](https://agentprime.io/advisories/GHSA-g9v5-gjwf-9rwx.md)
  `GHSA-g9v5-gjwf-9rwx`, `CVE-2026-45361`, `PYSEC-2026-166` · PyPI `apache-airflow-providers-google`: affected `<22.0.0`, fixed in `22.0.0` · CVSS 8.1 High · Not analysed yet · Published 25 May 2026 · Tags: CWE-322
- [goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request](https://agentprime.io/advisories/GHSA-mxg3-432p-mr72.md)
  `GHSA-mxg3-432p-mr72`, `GO-2026-5519` · Go `goshs.de/goshs/v2`: affected `<2.0.7`, fixed in `2.0.7` · CVSS 7.4 High · Not analysed yet · Published 15 May 2026 · Tags: Weak cryptography or TLS, CWE-322
- [Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions](https://agentprime.io/advisories/CVE-2026-44467.md)
  `CVE-2026-44467` · CVE record: anthropics claude-code · CVSS 7.4 High · Not analysed yet · Published 13 May 2026 · Tags: Weak cryptography or TLS, CWE-322
- [Zero Motorcycles Firmware Key Exchange without Entity Authentication](https://agentprime.io/advisories/CVE-2026-1354.md)
  `CVE-2026-1354` · CVE record: Zero Motorcycles Zero Motorcycles firmware · CVSS 5.9 Medium · Not analysed yet · Published 21 Apr 2026 · Tags: CWE-322
- [Apstra: SSH host key validation vulnerability for managed devices](https://agentprime.io/advisories/CVE-2025-13914.md)
  `CVE-2025-13914` · CVE record: Juniper Networks Apstra · CVSS 7.0 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-322
- [CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys](https://agentprime.io/advisories/CVE-2026-33697.md)
  `CVE-2026-33697` · CVE record: ultravioletrs cocos · CVSS 7.5 High · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-322, CWE-346
- [Duplicate Advisory: Keylime Missing Authentication for Critical Function and Improper Authentication](https://agentprime.io/advisories/GHSA-27jc-jmp8-qfw5.md)
  `GHSA-27jc-jmp8-qfw5` · PyPI `keylime`: affected `>=7.12.0, <7.12.2 || >=7.13.0, <7.13.1`, fixed in `7.12.2`, `7.13.1` · CVSS 9.4 Critical · Withdrawn · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-322
- [A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows...](https://agentprime.io/advisories/GHSA-4jqp-9qjv-57m2.md)
  `GHSA-4jqp-9qjv-57m2`, `CVE-2026-1709`, `PYSEC-2026-74` · PyPI `keylime`: affected `<7.12.0`, fixed in `7.12.0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-322
- [SSH Hostkey Misconfiguration Vulnerability in Archer Devices](https://agentprime.io/advisories/CVE-2025-62501.md)
  `CVE-2025-62501` · CVE record: TP-Link Systems Inc. Archer AX53 v1.0 and 2 more · CVSS 7.0 High · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-322
- [missing SFTP host verification with wolfSSH](https://agentprime.io/advisories/CVE-2025-10966.md)
  `CVE-2025-10966` · CVE record: curl curl · CVSS 4.3 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: CWE-322
- [Sandboxie exposes encrypted sandbox key during password change](https://agentprime.io/advisories/CVE-2025-54422.md)
  `CVE-2025-54422` · CVE record: sandboxie-plus Sandboxie · CVSS 6.9 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Information disclosure, Hard-coded credentials, CWE-322
- [Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability](https://agentprime.io/advisories/CVE-2025-20163.md)
  `CVE-2025-20163` · CVE record: Cisco Cisco Data Center Network Manager and 1 more · CVSS 8.7 High · Not analysed yet · Published 4 Jun 2025 · Tags: CWE-322
- [Backup uploads to ETM subject to man-in-the-middle interception](https://agentprime.io/advisories/CVE-2024-47519.md)
  `CVE-2024-47519` · CVE record: Arista Networks Arista Edge Threat Management · CVSS 8.3 High · Not analysed yet · Published 10 Jan 2025 · Tags: CWE-322
- [Brocade Fabric OS before 9.2.2 does not enforce strict host key checking](https://agentprime.io/advisories/CVE-2024-7516.md)
  `CVE-2024-7516` · CVE record: Brocade Fabric OS · CVSS 7.0 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-322
- [Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'](https://agentprime.io/advisories/CVE-2024-6572.md)
  `CVE-2024-6572` · CVE record: Checkmk GmbH Checkmk · CVSS 6.3 Medium · Not analysed yet · Published 9 Sept 2024 · Tags: CWE-322
- [Foreman: host ssh key not being checked in remote execution](https://agentprime.io/advisories/CVE-2024-4871.md)
  `CVE-2024-4871` · CVE record: Red Hat Red Hat Satellite 6.15 for RHEL 8 · CVSS 6.8 Medium · Not analysed yet · Published 14 May 2024 · Tags: CWE-322
- [When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder](https://agentprime.io/advisories/GHSA-w4pr-4vjg-hffh.md)
  `GHSA-w4pr-4vjg-hffh`, `CVE-2022-39254`, `PYSEC-2026-842` · PyPI `matrix-nio`: affected `<0.20`, fixed in `0.20` · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: Authentication bypass, CWE-322
- [matrix-sdk-crypto contains potential impersonation via room key forward responses](https://agentprime.io/advisories/GHSA-vp68-2wrm-69qm.md)
  `GHSA-vp68-2wrm-69qm`, `CVE-2022-39252`, `RUSTSEC-2022-0085` · crates.io `matrix-sdk-crypto`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: Authentication bypass, CWE-322
- [matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification](https://agentprime.io/advisories/GHSA-5w8r-8pgj-5jmf.md)
  `GHSA-5w8r-8pgj-5jmf`, `CVE-2022-39250` · npm `matrix-js-sdk`: affected `<19.7.0`, fixed in `19.7.0` · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: Authentication bypass, CWE-322
- [matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion](https://agentprime.io/advisories/GHSA-fpgf-pjjv-2qgm.md)
  `GHSA-fpgf-pjjv-2qgm`, `CVE-2022-39248` · Maven `org.matrix.android:matrix-android-sdk2`: affected `<1.5.1`, fixed in `1.5.1` · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: Authentication bypass, CWE-322
- [matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions](https://agentprime.io/advisories/GHSA-2pvj-p485-cp3m.md)
  `GHSA-2pvj-p485-cp3m`, `CVE-2022-39246` · Maven `org.matrix.android:matrix-android-sdk2`: affected `<1.5.1`, fixed in `1.5.1` · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2022 · Tags: Authentication bypass, CWE-322
- [matrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusion](https://agentprime.io/advisories/GHSA-r48r-j8fx-mq2c.md)
  `GHSA-r48r-j8fx-mq2c`, `CVE-2022-39251` · npm `matrix-js-sdk`: affected `<19.7.0`, fixed in `19.7.0` · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: Authentication bypass, CWE-322
- [matrix-js-sdk subject to impersonated messages due to permissive key forwarding](https://agentprime.io/advisories/GHSA-6263-x97c-c4gg.md)
  `GHSA-6263-x97c-c4gg`, `CVE-2022-39249` · npm `matrix-js-sdk`: affected `<19.7.0`, fixed in `19.7.0` · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2022 · Tags: Authentication bypass, CWE-322
- [Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions](https://agentprime.io/advisories/CVE-2022-39257.md)
  `CVE-2022-39257` · CVE record: matrix-org matrix-ios-sdk · CVSS 7.5 High · Not analysed yet · Published 28 Sept 2022 · Tags: Authentication bypass, CWE-322
- [Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion](https://agentprime.io/advisories/CVE-2022-39255.md)
  `CVE-2022-39255` · CVE record: matrix-org matrix-ios-sdk · CVSS 8.6 High · Not analysed yet · Published 28 Sept 2022 · Tags: Authentication bypass, CWE-322
- [Jenkins Git client plugin 3.11.0 does not perform SSH host key verification](https://agentprime.io/advisories/GHSA-cm7j-p8hc-97vj.md)
  `GHSA-cm7j-p8hc-97vj`, `CVE-2022-36881` · Maven `org.jenkins-ci.plugins:git-client`: affected `<3.11.1`, fixed in `3.11.1` · CVSS 4.8 Medium · Not analysed yet · Published 28 Jul 2022 · Tags: Weak cryptography or TLS, CWE-322
- [The Eclipse Foundation Eclipse Californium: In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3…](https://agentprime.io/advisories/CVE-2021-34433.md)
  `CVE-2021-34433` · CVE record: The Eclipse Foundation Eclipse Californium · No CVSS score · Not analysed yet · Published 20 Aug 2021 · Tags: CWE-322

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-322>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-322/>. Everything for agents: <https://agentprime.io/llms.txt>.