Description
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oxide | Omicron | 15 – < 17.1 | 17.1 |
Medium · 5.0
CVE-2025-66432
EUVD-2025-199923GHSA-xg9f-qgvm-j933
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.
Published Nov 30, 2025 · Updated Dec 1, 2025 · Assigned by mitre