TLS Certificate Validation Flaw in CISA Thorium Affecting Elasticsearch Service
CVE-2025-35434

2.3LOW

Key Information:

Vendor

Cisa

Status
Thorium
Vendor
CVE Published:
17 September 2025

What is CVE-2025-35434?

The CISA Thorium product has a vulnerability whereby it fails to validate TLS certificates during connections to Elasticsearch. This oversight allows unauthenticated attackers to impersonate the Elasticsearch service within a Thorium cluster, potentially leading to unauthorized access and data exposure. The issue was addressed in version 1.1.2, emphasizing the need for users to update to the latest version to mitigate these security risks.

Affected Version(s)

Thorium 1.0.0 < 1.1.2

Thorium 1.1.2

References

https://github.com/cisagov/thorium/releases/tag/1.1.2
https://github.com/cisagov/thorium/blob/main/api/src/mode...
https://www.cve.org/CVERecord?id=CVE-2025-35434

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

, OpenAI Security Research
.