CVE-2025-11935

Name of the Vulnerable Software and Affected Versions TLS 1.3 (affected versions not specified)

Description A server utilizing TLS 1.3 pre-shared key (PSK) may disregard a client’s request for perfect forward secrecy (PFS). This occurs when a server responds to a ClientHello containing psk dhe ke without a key share extension. Consequently, the client proceeds with the connection using PSK without PFS, potentially reducing the security of the connection. The re-use of an authenticated PSK connection lacking expected PFS diminishes connection security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.