CVE-2025-68121

CVE-2025-68121 is a critical vulnerability in golang's crypto/tls package, allowing a TLS session to be improperly resumed with a server or client that should have been rejected, due to changes in ClientCAs or RootCAs fields between handshakes. This flaw is rated 10.0 Critical (CVSSv3.1) with a network attack vector and low complexity, requiring no privileges or user interaction, and can lead to high impacts on confidentiality, integrity, and availability by bypassing intended authentication. While there is no public exploit code available and it is not listed in CISA's KEV catalog, the vulnerability is on the Hot List and has garnered significant community discussion and media coverage, indicating high awareness.