Medium severity5.3NVD Advisory· Published Jul 31, 2024· Updated Jun 17, 2026
CVE-2024-41254
CVE-2024-41254
Description
An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:litestream:litestream:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:litestream:litestream:*:*:*:*:*:*:*:*range: <=0.3.13
- (no CPE)range: <=0.3.13
- litestream/litestreamdescription
- osv-coords2 versions
< 0.5.2-r0+ 1 more
- (no CPE)range: < 0.5.2-r0
- (no CPE)range: < 0.5.2-r0
Patches
Vulnerability mechanics
References
1- gist.github.com/nyxfqq/d857f268a53aa62402655c8dcd95c68fnvdThird Party Advisory
News mentions
0No linked articles in our index yet.