Description
Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yubico | libfido2 | < 1.17.0 | 1.17.0 |
| Yubico | python-fido2 | < 2.2.0 | 2.2.0 |
| Yubico | yubikey-manager | < 5.9.1 | 5.9.1 |
Advisories 1
- WID-SEC-2026-1133 Yubico YubiKey Manager: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Apr 15, 2026