CVE & CISA-KEV CatalogNVD
CVE-2025-68158
MEDIUM5.7
CVSS v3
Description
Authlib is a Python library which builds OAuth and OpenID Connect servers. In versions 1.0.0 through 1.6.5, cache-backed state/request-token storage is not tied to the initiating user session, so CSRF is possible for any attacker that has a valid state (easily obtainable via an attacker-initiated authentication flow). When a cache is supplied to the OAuth client registry, FrameworkIntegration.set_state_data writes the entire state blob under _state_{app}_{state}, and get_state_data ignores the caller’s session altogether. This issue has been patched in version 1.6.6.
How to fix
Remediation Available
python-authlibDebian
Fixed in:1.2.0-1+deb12u1CVE-2025-68158
Fixed in:1.6.0-1+deb13u1CVE-2025-68158
Fixed in:1.6.6-1CVE-2025-68158
registry.redhat.io/quay/clairRed Hat / RHEL
Fixed in:rhel9@sha256:618838ba45069cb93c48acc40c19186a5e471d4ea17f8f057a5187e74d196a9b_amd64RHSA-2026:6497
Fixed in:rhel9@sha256:618838ba45069cb93c48acc40c19186a5e471d4ea17f8f057a5187e74d196a9b_amd64RHSA-2026:6567
Fixed in:rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390xRHSA-2026:6568
Fixed in:rhel9@sha256:6f505834f4023e94f791769bb6726d24e8e94605ee525d4f657b38ec2810e06f_s390xRHSA-2026:6567
Fixed in:rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64RHSA-2026:6568
Fixed in:rhel9@sha256:6f505834f4023e94f791769bb6726d24e8e94605ee525d4f657b38ec2810e06f_s390xRHSA-2026:6497
Fixed in:rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64leRHSA-2026:6568
Fixed in:rhel9@sha256:bbd4e466a0973195c134bc7bd406a824a5e205201559931d2975fd337b435e7c_ppc64leRHSA-2026:6567
Fixed in:rhel9@sha256:bbd4e466a0973195c134bc7bd406a824a5e205201559931d2975fd337b435e7c_ppc64leRHSA-2026:6497
registry.redhat.io/quay/clairRocky
Fixed in:rhel9@sha256:6f505834f4023e94f791769bb6726d24e8e94605ee525d4f657b38ec2810e06f_s390xRHSA-2026:6497
Fixed in:rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390xRHSA-2026:6568
Fixed in:rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64leRHSA-2026:6568
Fixed in:rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64RHSA-2026:6568
Fixed in:rhel9@sha256:bbd4e466a0973195c134bc7bd406a824a5e205201559931d2975fd337b435e7c_ppc64leRHSA-2026:6497
Fixed in:rhel9@sha256:bbd4e466a0973195c134bc7bd406a824a5e205201559931d2975fd337b435e7c_ppc64leRHSA-2026:6567
Fixed in:rhel9@sha256:618838ba45069cb93c48acc40c19186a5e471d4ea17f8f057a5187e74d196a9b_amd64RHSA-2026:6567
Fixed in:rhel9@sha256:618838ba45069cb93c48acc40c19186a5e471d4ea17f8f057a5187e74d196a9b_amd64RHSA-2026:6497
Fixed in:rhel9@sha256:6f505834f4023e94f791769bb6726d24e8e94605ee525d4f657b38ec2810e06f_s390xRHSA-2026:6567
registry.redhat.io/quay/quayRed Hat / RHEL
Fixed in:operator-rhel9@sha256:4ed1d4a7fe3bf6e4bb19551ae6e9349a50e5b3e7e003c8624fbfa9179d6a9dad_amd64RHSA-2026:6567
Fixed in:builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64RHSA-2026:6568
Fixed in:operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64RHSA-2026:6568
Fixed in:operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64RHSA-2026:6568
Fixed in:rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64RHSA-2026:6568
Fixed in:builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64leRHSA-2026:6568
Fixed in:operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64leRHSA-2026:6568
Fixed in:rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64leRHSA-2026:6568
Fixed in:builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390xRHSA-2026:6568
Fixed in:operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390xRHSA-2026:6568
Fixed in:rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390xRHSA-2026:6568
Fixed in:builder-rhel9@sha256:af9f4557f46bb29353be32e53f3c49d32d4641859a3ed385e69423a37b04fa03_amd64RHSA-2026:6497
Fixed in:operator-bundle@sha256:1ab0303614da22f6a9e3005358de62ba1079f90f2410481603eb33b5b2f7db70_amd64RHSA-2026:6497
Fixed in:operator-rhel9@sha256:7aa800901c5b9a158fe07c3a632bf95920af918f70753de3ef201d3be7684ca5_amd64RHSA-2026:6497
Fixed in:rhel9@sha256:39155eb5f845ade84925b763885a363b95ba927e91e2ee76d8df304620b9ac0e_amd64RHSA-2026:6497
Fixed in:builder-rhel9@sha256:342f40181bab7dcc4acdbf4d28fa314fc1dd9c9a3e9e99024e7c856f46fd8092_ppc64leRHSA-2026:6497
Fixed in:operator-rhel9@sha256:d8e040decc94bdb06eda60acb11ff111221d059495c706e3dc9cc8c124ec603b_ppc64leRHSA-2026:6497
Fixed in:rhel9@sha256:3559638cc583d4a6e550d3572f9696dc488d8f75d6f7f77c9853c4881d98dd4a_ppc64leRHSA-2026:6497
Fixed in:builder-rhel9@sha256:b97e1ced70d68a5ff55dca3fe7962995f7f9559e7305660bdf829cc60e6cb2bd_s390xRHSA-2026:6497
Fixed in:operator-rhel9@sha256:401ad33f2305b2f3f54823135c9d25531d55936efb7d20ca1dac5b88efc71a28_s390xRHSA-2026:6497
Fixed in:rhel9@sha256:de5cfa1742d9eed1e2d7b07693559f1cf52eca41fda6cfb83d226cf3f9bafb9e_s390xRHSA-2026:6497
Fixed in:rhel9@sha256:0bc25ef16eabd14562b5c15b2f242558ace42865d416820420d669436d9d71ae_arm64RHSA-2026:6497
Fixed in:rhel9@sha256:8298307eb70190d303ad03a1b44a183df1e0fb5aa8f146e4abd028ea82d0aaf2_s390xRHSA-2026:6567
Fixed in:builder-rhel9@sha256:cd0cec48f12c48bcaaeb5393be4a05d14d2bdad5d0c6071f3a1d4281fd43b58d_s390xRHSA-2026:6567
Fixed in:operator-rhel9@sha256:96331c01153e9fe30375a824093c827be40f5ed757341845b1becc31aba21361_s390xRHSA-2026:6567
Fixed in:builder-rhel9@sha256:053e4754b5cae3086a44d302f5dc3254e4d7e312b154972774c5793d988846e8_amd64RHSA-2026:6567
Fixed in:operator-bundle@sha256:7cb7b3d876d95c43ff147d72a46a832119050f7a337e0c0e83bd35ef82df0588_amd64RHSA-2026:6567
Fixed in:rhel9@sha256:701d55bb5aa5d095dc759a4e07d2c7e647c401bb13e4dd868afec2ee66f51406_amd64RHSA-2026:6567
Fixed in:builder-rhel9@sha256:f5bd5ebf3c14a2320c7196c895df050b0dd605603f1a2fadff6901f3fdd44194_ppc64leRHSA-2026:6567
Fixed in:operator-rhel9@sha256:b5a1f05b332a19479f08a5493c47c088602e06983abf894c4bf86c51d0ba392f_ppc64leRHSA-2026:6567
Fixed in:rhel9@sha256:5937639bb3bc4fd76c1dfa9d1550f8ab955a5d12b44794c076d127a5ba4d68a4_ppc64leRHSA-2026:6567
Fixed in:rhel9@sha256:efe1b48667d21b1bc7c7d7b9c320be3e47f5679984079f1d4b976247e34ef087_arm64RHSA-2026:6567
registry.redhat.io/quay/quayRocky
Fixed in:builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64RHSA-2026:6568
Fixed in:operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64RHSA-2026:6568
Fixed in:operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64RHSA-2026:6568
Fixed in:rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64RHSA-2026:6568
Fixed in:builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64leRHSA-2026:6568
Fixed in:operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64leRHSA-2026:6568
Fixed in:rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64leRHSA-2026:6568
Fixed in:builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390xRHSA-2026:6568
Fixed in:operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390xRHSA-2026:6568
Fixed in:rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390xRHSA-2026:6568
Fixed in:builder-rhel9@sha256:af9f4557f46bb29353be32e53f3c49d32d4641859a3ed385e69423a37b04fa03_amd64RHSA-2026:6497
Fixed in:operator-bundle@sha256:1ab0303614da22f6a9e3005358de62ba1079f90f2410481603eb33b5b2f7db70_amd64RHSA-2026:6497
Fixed in:operator-rhel9@sha256:7aa800901c5b9a158fe07c3a632bf95920af918f70753de3ef201d3be7684ca5_amd64RHSA-2026:6497
Fixed in:rhel9@sha256:39155eb5f845ade84925b763885a363b95ba927e91e2ee76d8df304620b9ac0e_amd64RHSA-2026:6497
Fixed in:builder-rhel9@sha256:342f40181bab7dcc4acdbf4d28fa314fc1dd9c9a3e9e99024e7c856f46fd8092_ppc64leRHSA-2026:6497
Fixed in:operator-rhel9@sha256:d8e040decc94bdb06eda60acb11ff111221d059495c706e3dc9cc8c124ec603b_ppc64leRHSA-2026:6497
Fixed in:rhel9@sha256:3559638cc583d4a6e550d3572f9696dc488d8f75d6f7f77c9853c4881d98dd4a_ppc64leRHSA-2026:6497
Fixed in:builder-rhel9@sha256:b97e1ced70d68a5ff55dca3fe7962995f7f9559e7305660bdf829cc60e6cb2bd_s390xRHSA-2026:6497
Fixed in:operator-rhel9@sha256:401ad33f2305b2f3f54823135c9d25531d55936efb7d20ca1dac5b88efc71a28_s390xRHSA-2026:6497
Fixed in:rhel9@sha256:de5cfa1742d9eed1e2d7b07693559f1cf52eca41fda6cfb83d226cf3f9bafb9e_s390xRHSA-2026:6497
Fixed in:rhel9@sha256:0bc25ef16eabd14562b5c15b2f242558ace42865d416820420d669436d9d71ae_arm64RHSA-2026:6497
Fixed in:rhel9@sha256:8298307eb70190d303ad03a1b44a183df1e0fb5aa8f146e4abd028ea82d0aaf2_s390xRHSA-2026:6567
Fixed in:builder-rhel9@sha256:cd0cec48f12c48bcaaeb5393be4a05d14d2bdad5d0c6071f3a1d4281fd43b58d_s390xRHSA-2026:6567
Fixed in:operator-rhel9@sha256:96331c01153e9fe30375a824093c827be40f5ed757341845b1becc31aba21361_s390xRHSA-2026:6567
Fixed in:builder-rhel9@sha256:053e4754b5cae3086a44d302f5dc3254e4d7e312b154972774c5793d988846e8_amd64RHSA-2026:6567
Fixed in:operator-bundle@sha256:7cb7b3d876d95c43ff147d72a46a832119050f7a337e0c0e83bd35ef82df0588_amd64RHSA-2026:6567
Fixed in:operator-rhel9@sha256:4ed1d4a7fe3bf6e4bb19551ae6e9349a50e5b3e7e003c8624fbfa9179d6a9dad_amd64RHSA-2026:6567
Fixed in:rhel9@sha256:701d55bb5aa5d095dc759a4e07d2c7e647c401bb13e4dd868afec2ee66f51406_amd64RHSA-2026:6567
Fixed in:builder-rhel9@sha256:f5bd5ebf3c14a2320c7196c895df050b0dd605603f1a2fadff6901f3fdd44194_ppc64leRHSA-2026:6567
Fixed in:operator-rhel9@sha256:b5a1f05b332a19479f08a5493c47c088602e06983abf894c4bf86c51d0ba392f_ppc64leRHSA-2026:6567
Fixed in:rhel9@sha256:5937639bb3bc4fd76c1dfa9d1550f8ab955a5d12b44794c076d127a5ba4d68a4_ppc64leRHSA-2026:6567
Fixed in:rhel9@sha256:efe1b48667d21b1bc7c7d7b9c320be3e47f5679984079f1d4b976247e34ef087_arm64RHSA-2026:6567
registry.redhat.io/quay/quay-bridgeRed Hat / RHEL
Fixed in:operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64leRHSA-2026:6568
Fixed in:operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64RHSA-2026:6568
Fixed in:operator-rhel9@sha256:22039703011a8853c57bad658c5d6d4b44543a8924d24b0c6e1eeb47a4092152_s390xRHSA-2026:6567
Fixed in:operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64RHSA-2026:6568
Fixed in:operator-bundle@sha256:1ca15d4a3ec7067bb925e83588e5ac94674e77ba29969cba9137c07bafadc025_amd64RHSA-2026:6497
Fixed in:operator-rhel9@sha256:4b923525f815b87f3375bd5346f8261746d2e172f2f83b4604c558c4d7ae64ee_amd64RHSA-2026:6497
Fixed in:operator-bundle@sha256:d5ad15db6f5f6271dbff37712024fb3aee765d29a88c58b65be8a174fdfffa04_amd64RHSA-2026:6567
Fixed in:operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390xRHSA-2026:6568
Fixed in:operator-rhel9@sha256:361f6631b82a6b550dcbd1ae3748229fd72e2b9ab5dfb537f326f680ded5700f_amd64RHSA-2026:6567
Fixed in:operator-rhel9@sha256:1d28e4844da6b1bd1e2fbad161ca68494cac166b9fa22b30a558e0d8a3c9d12d_ppc64leRHSA-2026:6497
Fixed in:operator-rhel9@sha256:7b90f185ddc5973be1bc4ffd27b785debb1d519cc6c0ea400a7fbbf22dfa2375_s390xRHSA-2026:6497
Fixed in:operator-rhel9@sha256:ce3149ec9752b6d48be532e33be903a30746237b27e5daa3d64358533981ddee_ppc64leRHSA-2026:6567
registry.redhat.io/quay/quay-bridgeRocky
Fixed in:operator-rhel9@sha256:ce3149ec9752b6d48be532e33be903a30746237b27e5daa3d64358533981ddee_ppc64leRHSA-2026:6567
Fixed in:operator-rhel9@sha256:22039703011a8853c57bad658c5d6d4b44543a8924d24b0c6e1eeb47a4092152_s390xRHSA-2026:6567
Fixed in:operator-rhel9@sha256:7b90f185ddc5973be1bc4ffd27b785debb1d519cc6c0ea400a7fbbf22dfa2375_s390xRHSA-2026:6497
Fixed in:operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64RHSA-2026:6568
Fixed in:operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64RHSA-2026:6568
Fixed in:operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64leRHSA-2026:6568
Fixed in:operator-bundle@sha256:d5ad15db6f5f6271dbff37712024fb3aee765d29a88c58b65be8a174fdfffa04_amd64RHSA-2026:6567
Fixed in:operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390xRHSA-2026:6568
Fixed in:operator-rhel9@sha256:361f6631b82a6b550dcbd1ae3748229fd72e2b9ab5dfb537f326f680ded5700f_amd64RHSA-2026:6567
Fixed in:operator-rhel9@sha256:1d28e4844da6b1bd1e2fbad161ca68494cac166b9fa22b30a558e0d8a3c9d12d_ppc64leRHSA-2026:6497
Fixed in:operator-bundle@sha256:1ca15d4a3ec7067bb925e83588e5ac94674e77ba29969cba9137c07bafadc025_amd64RHSA-2026:6497
Fixed in:operator-rhel9@sha256:4b923525f815b87f3375bd5346f8261746d2e172f2f83b4604c558c4d7ae64ee_amd64RHSA-2026:6497
registry.redhat.io/quay/quay-builder-qemuRed Hat / RHEL
Fixed in:rhcos-rhel8@sha256:1d0b2c18a32a5e1195a65e2c6fe5c79f8acd1695a56e848302621a87e5ec041c_amd64RHSA-2026:6497
Fixed in:rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64RHSA-2026:6568
Fixed in:rhcos-rhel8@sha256:1d0b2c18a32a5e1195a65e2c6fe5c79f8acd1695a56e848302621a87e5ec041c_amd64RHSA-2026:6567
registry.redhat.io/quay/quay-builder-qemuRocky
Fixed in:rhcos-rhel8@sha256:1d0b2c18a32a5e1195a65e2c6fe5c79f8acd1695a56e848302621a87e5ec041c_amd64RHSA-2026:6497
Fixed in:rhcos-rhel8@sha256:1d0b2c18a32a5e1195a65e2c6fe5c79f8acd1695a56e848302621a87e5ec041c_amd64RHSA-2026:6567
Fixed in:rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64RHSA-2026:6568
registry.redhat.io/quay/quay-container-securityRocky
Fixed in:operator-bundle@sha256:a48e62759aae34528989bef0e959d1e7f8eeac108e3118bbd86e909882e1b775_amd64RHSA-2026:6497
Fixed in:operator-rhel9@sha256:943935018ddabe868b693b6078580325ec04905fd1cf13553ef7e351427caf14_amd64RHSA-2026:6497
Fixed in:operator-rhel9@sha256:fdcdd27be37044e0ab7b599ccc825b4ab3b3a77cb82d5436462098602a6b5a8d_ppc64leRHSA-2026:6567
Fixed in:operator-rhel9@sha256:8b059901d52536b850c65e2ed38d136b2cf831dc12af8a2eea71e584fcd49354_ppc64leRHSA-2026:6497
Fixed in:operator-rhel9@sha256:9bc7b33061b26d6192081ce3fd9fcf2b7c3be9cd9b7901bbc0893d2db87017f2_s390xRHSA-2026:6567
Fixed in:operator-rhel9@sha256:b5e3b47f06c81244340ca599511d221efd830ff31ed15c5c3ab5ea4bbb45388f_s390xRHSA-2026:6497
Fixed in:operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390xRHSA-2026:6568
Fixed in:operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64RHSA-2026:6568
Fixed in:operator-bundle@sha256:1ea5311ae56a211c4424a42d023745b962e8d322bb77097773d4621f0c0d5e91_amd64RHSA-2026:6567
Fixed in:operator-rhel9@sha256:2c1cb5de345c1ad4cb605d9b22ebbf1b0b0f8fbae51ebe04f63c522d4a27938e_amd64RHSA-2026:6567
Fixed in:operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64leRHSA-2026:6568
Fixed in:operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64RHSA-2026:6568
registry.redhat.io/quay/quay-container-securityRed Hat / RHEL
Fixed in:operator-rhel9@sha256:8b059901d52536b850c65e2ed38d136b2cf831dc12af8a2eea71e584fcd49354_ppc64leRHSA-2026:6497
Fixed in:operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64RHSA-2026:6568
Fixed in:operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64RHSA-2026:6568
Fixed in:operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390xRHSA-2026:6568
Fixed in:operator-bundle@sha256:1ea5311ae56a211c4424a42d023745b962e8d322bb77097773d4621f0c0d5e91_amd64RHSA-2026:6567
Fixed in:operator-rhel9@sha256:2c1cb5de345c1ad4cb605d9b22ebbf1b0b0f8fbae51ebe04f63c522d4a27938e_amd64RHSA-2026:6567
Fixed in:operator-bundle@sha256:a48e62759aae34528989bef0e959d1e7f8eeac108e3118bbd86e909882e1b775_amd64RHSA-2026:6497
Fixed in:operator-rhel9@sha256:943935018ddabe868b693b6078580325ec04905fd1cf13553ef7e351427caf14_amd64RHSA-2026:6497
Fixed in:operator-rhel9@sha256:b5e3b47f06c81244340ca599511d221efd830ff31ed15c5c3ab5ea4bbb45388f_s390xRHSA-2026:6497
Fixed in:operator-rhel9@sha256:9bc7b33061b26d6192081ce3fd9fcf2b7c3be9cd9b7901bbc0893d2db87017f2_s390xRHSA-2026:6567
Fixed in:operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64leRHSA-2026:6568
Fixed in:operator-rhel9@sha256:fdcdd27be37044e0ab7b599ccc825b4ab3b3a77cb82d5436462098602a6b5a8d_ppc64leRHSA-2026:6567
registry.redhat.io/satellite/foreman-mcpRed Hat / RHEL
Fixed in:server-rhel9@sha256:1b7b876fff71426558de0a3f790b8c62f9e34c61b9d6dd80a6c7c45154971428_amd64RHSA-2026:28405
registry.redhat.io/satellite/foreman-mcpRocky
Fixed in:server-rhel9@sha256:1b7b876fff71426558de0a3f790b8c62f9e34c61b9d6dd80a6c7c45154971428_amd64RHSA-2026:28405
python-authlibUbuntu
Fixed in:0.15.5-1ubuntu0.1~esm1USN-8065-1
Fixed in:1.3.0-1ubuntu0.1~esm1USN-8065-1
python-authlib-docUbuntu
Fixed in:0.15.5-1ubuntu0.1~esm1USN-8065-1
Fixed in:1.3.0-1ubuntu0.1~esm1USN-8065-1
python3-authlibUbuntu
Fixed in:0.15.5-1ubuntu0.1~esm1USN-8065-1
Fixed in:1.3.0-1ubuntu0.1~esm1USN-8065-1
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionRequired
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Exploit Intelligence
0.24%probability of exploitation in 30 days
15thpercentile
Low risk: more likely to be exploited than 15% of all known CVEs.
References
Patch2
Exploit1
Related Vulnerabilities
Other CWE-352 (Cross-Site Request Forgery) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2016-6277 | High | 8.8 | 100% | KEV | - |
| CVE-2014-0054 | Medium | 6.8 | 91% | - | Fix |
| CVE-2013-6429 | Medium | 6.8 | 90% | - | Fix |
| CVE-2022-41622 | High | 8.8 | 88% | - | - |
| CVE-2018-7700 | High | 8.8 | 75% | - | - |
| CVE-2015-2295 | Medium | 6.8 | 66% | - | - |
Embed a live status badge for CVE-2025-68158
Markdown
[](https://tridentstack.com/cve/CVE-2025-68158)HTML
<a href="https://tridentstack.com/cve/CVE-2025-68158"><img src="https://tridentstack.com/cve/badge/CVE-2025-68158.svg" alt="CVE-2025-68158"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-03-30.