Man-in-the-Middle Vulnerability in NeuVector's OpenID Connect Authentication

CVE-2025-66001

What is CVE-2025-66001?

NeuVector's authentication process for OpenID Connect does not enforce TLS verification by default, potentially allowing attackers to intercept and manipulate communications between users and the remote server. This lack of enforcement increases the risk of man-in-the-middle (MITM) attacks, where malicious actors can gain unauthorized access to sensitive data. Organizations utilizing NeuVector should ensure proper TLS configurations to safeguard their authentication mechanisms and protect their infrastructure.

References