CVE-2026-60007

Name of the Vulnerable Software and Affected Versions Eclipse Milo versions 0.6.0 through 1.1.4

Description Username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures. This allows an on-path attacker who captures a victim's Basic128Rsa15-encrypted username token to use repeated unauthenticated ActivateSession requests as a padding oracle—a side-channel attack that reveals information about the plaintext by observing error responses—to recover the victim's password and authenticate with the recovered credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.