Skip to content

Fix flaw in token authentication logic#2177

Merged
wnetelhabana merged 2 commits intoHabanaAI:v1.22.2_nextfrom
agrabow:dev/token_auth
Dec 15, 2025
Merged

Fix flaw in token authentication logic#2177
wnetelhabana merged 2 commits intoHabanaAI:v1.22.2_nextfrom
agrabow:dev/token_auth

Conversation

@agrabow
Copy link
Copy Markdown

@agrabow agrabow commented Dec 11, 2025

Fixes CVE-2025-59425
Fix authentication problem found by RedHat. In upstream it was implemented by ee10d7e

Copy of verify_token() from ee10d7e
(upstream)

(cherry picked from commit 3339410)
@iboiko-habana
Copy link
Copy Markdown

/run-gaudi-tests

@wnetelhabana wnetelhabana merged commit edd2af1 into HabanaAI:v1.22.2_next Dec 15, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants