CVE-2026-118765

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-118765", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-28T19:20:05.017Z", "datePublished": "2026-10-29T17:12:07.807Z", "dateUpdated": "2026-10-29T20:19:55.406Z"}, "containers": {"cna": {"title": "Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state", "problemTypes": [{"descriptions": [{"cweId": "CWE-335", "lang": "en", "description": "CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/randombit/botan/security/advisories/GHSA-95xx-xh9v-v9c4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/randombit/botan/security/advisories/GHSA-95xx-xh9v-v9c4"}, {"name": "https://github.com/randombit/botan/pull/5838", "tags": ["x_refsource_MISC"], "url": "https://github.com/randombit/botan/pull/5838"}, {"name": "https://github.com/randombit/botan/commit/a7389222ace990604b6985add91ee06f55a80c0e", "tags": ["x_refsource_MISC"], "url": "https://github.com/randombit/botan/commit/a7389222ace990604b6985add91ee06f55a80c0e"}], "affected": [{"vendor": "randombit", "product": "botan", "versions": [{"version": ">= 3.7.0, < 3.13.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-29T17:12:07.807Z"}, "descriptions": [{"lang": "en", "value": "Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeeded_RNG to mark itself seeded without consulting the configured entropy source. On builds without BOTAN_HAS_SYSTEM_RNG, the fallback uses only a clock value and process ID, so a later non-empty request can produce output from predictable state. This issue is fixed in version 3.13.0."}], "source": {"advisory": "GHSA-95xx-xh9v-v9c4", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-29T20:19:42.210615Z", "id": "CVE-2026-118765", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-29T20:19:55.406Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-118765", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-29T20:19:42.210615Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-29T20:19:49.768Z"}}], "cna": {"title": "Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state", "source": {"advisory": "GHSA-95xx-xh9v-v9c4", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH"}}], "affected": [{"vendor": "randombit", "product": "botan", "versions": [{"status": "affected", "version": ">= 3.7.0, < 3.13.0"}]}], "references": [{"url": "https://github.com/randombit/botan/security/advisories/GHSA-95xx-xh9v-v9c4", "name": "https://github.com/randombit/botan/security/advisories/GHSA-95xx-xh9v-v9c4", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/randombit/botan/pull/5838", "name": "https://github.com/randombit/botan/pull/5838", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/randombit/botan/commit/a7389222ace990604b6985add91ee06f55a80c0e", "name": "https://github.com/randombit/botan/commit/a7389222ace990604b6985add91ee06f55a80c0e", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeeded_RNG to mark itself seeded without consulting the configured entropy source. On builds without BOTAN_HAS_SYSTEM_RNG, the fallback uses only a clock value and process ID, so a later non-empty request can produce output from predictable state. This issue is fixed in version 3.13.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-335", "description": "CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-29T17:12:07.807Z"}}}, "cveMetadata": {"cveId": "CVE-2026-118765", "state": "PUBLISHED", "dateUpdated": "2026-10-29T20:19:55.406Z", "dateReserved": "2026-10-28T19:20:05.017Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-10-29T17:12:07.807Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "botan", "vendor": "randombit", "versions": [{"status": "affected", "version": ">= 3.7.0, < 3.13.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeeded_RNG to mark itself seeded without consulting the configured entropy source. On builds without BOTAN_HAS_SYSTEM_RNG, the fallback uses only a clock value and process ID, so a later non-empty request can produce output from predictable state. This issue is fixed in version 3.13.0."}], "id": "CVE-2026-118765", "lastModified": "2026-10-30T19:37:07.073", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-118765", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-29T20:19:42.210615Z", "version": "2.0.3"}}]}, "published": "2026-10-29T17:18:07.523", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/randombit/botan/commit/a7389222ace990604b6985add91ee06f55a80c0e"}, {"source": "security-advisories@github.com", "url": "https://github.com/randombit/botan/pull/5838"}, {"source": "security-advisories@github.com", "url": "https://github.com/randombit/botan/security/advisories/GHSA-95xx-xh9v-v9c4"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-335"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "botan: botan: Predictable random number generation via empty buffer request", "id": "2563608", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563608"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-335", "details": ["Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeeded_RNG to mark itself seeded without consulting the configured entropy source. On builds without BOTAN_HAS_SYSTEM_RNG, the fallback uses only a clock value and process ID, so a later non-empty request can produce output from predictable state. This issue is fixed in version 3.13.0.", "A flaw was found in Botan. When its automatic random number generator (RNG) is queried with an empty buffer while unseeded, it can improperly mark itself as seeded without gathering entropy from a secure source. On configurations lacking system RNG support, the generator falls back on predictable values such as timestamps and process IDs. A local attacker can exploit this condition to predict random outputs, compromising the confidentiality and integrity of cryptographic keys and sensitive operations."], "name": "CVE-2026-118765", "public_date": "2026-10-29T17:12:07Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-118765\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-118765\nhttps://github.com/randombit/botan/commit/a7389222ace990604b6985add91ee06f55a80c0e\nhttps://github.com/randombit/botan/pull/5838\nhttps://github.com/randombit/botan/security/advisories/GHSA-95xx-xh9v-v9c4"], "statement": "This vulnerability is rated as Moderate impact because exploitation requires an atypical sequence of application calls alongside local access to observe or predict cryptographic states. In standard Red Hat Enterprise Linux environments, platform entropy facilities are active, preventing reliance on predictable fallback timers and process identifiers. Furthermore, Botan is not included as part of core Red Hat Enterprise Linux releases, significantly limiting exposure across enterprise deployments.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[3.7.0,3.13.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "botan", "source": "cna", "vendor": "randombit"}, "product": "botan", "vendor": "randombit"}], "created": "2026-10-29T19:00:08.249690+00:00", "updated": "2026-10-29T19:30:15.823416+00:00", "vendors": ["randombit", "randombit$PRODUCT$botan"]}