HTTP Header Parsing Flaw in NextX Duo by Eclipse Foundation

CVE-2025-55085

What is CVE-2025-55085?

A vulnerability in NextX Duo prior to version 6.4.4 exists due to improper validation of HTTP header fields in the HTTP client module. This lack of bounds verification can allow a crafted server response to trigger undefined behavior, potentially compromising the integrity of the application and exposing it to further risks. It is crucial for users of affected versions to update promptly to mitigate exposure to such issues.

References