CVE-2025-65548

9.1 CRITICAL
Published: December 08, 2025 Modified: December 15, 2025
View on NVD

Description

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary data.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://bitcointalk.org/index.php?topic=5564329
Source: cve@mitre.org
Exploit Issue Tracking
https://delvingbitcoin.org/t/public-disclosure-denial-of-service-using-htlc-in-cashu/2090
Source: cve@mitre.org
Broken Link
https://github.com/cashubtc/nuts/blob/main/07.md
Source: cve@mitre.org
Exploit Third Party Advisory
https://github.com/cashubtc/nuts/blob/main/14.md
Source: cve@mitre.org
Exploit Third Party Advisory
https://github.com/jamesob/delving-bitcoin-archive/blob/master/archive/rendered-topics/2025-11-November/2025-11-02-public-disclosure-denial-of-service-using-htlc-in-cashu-id2090.md
Source: cve@mitre.org
Exploit Third Party Advisory
https://preimage007.github.io/
Source: cve@mitre.org
Product
https://bitcointalk.org/index.php?topic=5564329
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Exploit Issue Tracking
https://github.com/jamesob/delving-bitcoin-archive/blob/master/archive/rendered-topics/2025-11-November/2025-11-02-public-disclosure-denial-of-service-using-htlc-in-cashu-id2090.md
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Exploit Third Party Advisory

8 reference(s) from NVD

Quick Stats

CVSS v3 Score
9.1 / 10.0
EPSS (Exploit Probability)
0.1%
20th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-1284

Affected Vendors

cashu

Related CVEs

CVE-2025-52691 10.0
CVE-2025-15168 7.3
CVE-2025-15167 7.3
CVE-2025-15166 7.3
CVE-2025-15165 7.3