# CVE-2025-13470

## Summary

- **CVE ID:** CVE-2025-13470
- **Severity:** HIGH
- **CVSS Score:** 7.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/AU:Y/RE:H/U:Red)
- **CWE:** CWE-330
- **Published:** Nov 21, 2025
- **Last Modified:** Mar 13, 2026

## Description

In RNP version 0.18.0 a refactoring regression causes the symmetric 
session key used for Public-Key Encrypted Session Key (PKESK) packets to
 be left uninitialized except for zeroing, resulting in it always being 
an all-zero byte array.

Any data encrypted using public-key encryption 
in this release can be decrypted trivially by supplying an all-zero 
session key, fully compromising confidentiality.

The vulnerability affects only public key encryption (PKESK packets).  Passphrase-based encryption (SKESK packets) is not affected.

Root cause: Vulnerable session key buffer used in PKESK packet generation.



The defect was introduced in commit `7bd9a8dc356aae756b40755be76d36205b6b161a` where initialization 
logic inside `encrypted_build_skesk()` only randomized the key for the 
SKESK path and omitted it for the PKESK path.

## Affected Products

- Ribose — RNP (0.18.0)

## References

- [CNA](https://github.com/rnpgp/rnp/commit/7bd9a8dc356aae756b40755be76d36205b6b161a)
- [CNA](https://launchpad.net/ubuntu/+source/rnp)
- [CNA](https://aur.archlinux.org/packages/rnp)
- [CNA](https://packages.gentoo.org/packages/dev-util/librnp)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2415863)
- [CNA](https://access.redhat.com/security/cve/cve-2025-13402)
- [CNA](https://open.ribose.com/advisories/ra-2025-11-20/)
- [CNA](https://github.com/rnpgp/rnp/releases/tag/v0.18.1)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.30%
- **EPSS Percentile:** 22.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-12._