CVE-2025-29779

CVE-2025-29779 affects Post-Quantum Secure Feldman's Verifiable Secret Sharing versions 0.8.0b2 and prior, specifically its Python implementation of Feldman's VSS. The vulnerability lies in the insecure fault injection mitigation within the secure_redundant_execution function, which fails to provide true isolation or robust timing protection, making it susceptible to bypass. This is a Medium severity vulnerability (CVSS 5.4) with a physical attack vector and high attack complexity. A successful fault injection attack could allow an attacker with physical access to extract secret coefficients, force acceptance of invalid shares, or manipulate commitment verification, undermining the scheme's security guarantees. As of publication, there are no known exploits in the wild, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage. While no patched versions exist, mitigations include physical security controls and increasing redundancy.