{"id":"CVE-2026-109140","published":"2026-11-02T16:17:26.953","lastModified":"2026-11-02T19:35:33.347","description":"The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 on every Krill restart, so the same (key, nonce) pair is used again after each restart.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L","cwes":["CWE-323"],"vendors":[],"products":[],"references":[{"url":"https://www.nlnetlabs.nl/downloads/krill/CVE-2026-109140.txt","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Krill reuses encryption keys and nonces for login-session tokens after each service restart because the nonce counter resets to zero, breaking session confidentiality and integrity.","exploitability":"Exploitation requires network access and knowledge of a prior session token before the restart; it is difficult in practice due to the need to capture tokens pre-restart and replay them post-restart.","blast_radius":"An attacker who recovers a reused (key, nonce) pair can decrypt or forge session tokens, potentially gaining unauthorized access to user sessions and compromising confidentiality and integrity of authenticated requests.","remediation":"Upgrade to Krill version 2.590 or later, which fixes the nonce reset issue by using a persistent counter or cryptographically secure random nonces.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["session-hijack","crypto-flaw","auth-bypass","replay"],"model":"garnet-coder","analyzedAt":"2026-11-03T10:01:31.016Z"}}