CVE-2026-60007 - In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's `Basic128Rsa15`-encrypted username token to use repeated unauthenticated `ActivateSession` requests as a padding oracle, recover the victim's password, and authenticate with the recovered credentials

Back Back to CVE browser

CRITICAL

In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's `Basic128Rsa15`-encrypted username token to use repeated unauthenticated `ActivateSession` requests as a padding oracle, recover the victim's password, and authenticate with the recovered credentials

Published Aug 4, 2026

9.1

CRITICAL

CVSS 4.0

EPSS 0.55%

Description

In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's `Basic128Rsa15`-encrypted username token to use repeated unauthenticated `ActivateSession` requests as a padding oracle, recover the victim's password, and authenticate with the recovered credentials.

Affected products

Vendor Eclipse Foundation Product Eclipse Milo Default
unaffected
- Version
  0.6.0
  Status
  affected
  Constraints
  <=1.1.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Eclipse Foundation

Eclipse Milo

unaffected

Version	Status	Constraints
0.6.0	affected	<=1.1.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-204

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-52660
Advisory
https://github.com/eclipse-milo/milo/commit/db59fae993a3a1bc66fffc8a2796d444b40285fb
Patch
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/183
Issue TrackingPatchVendor Advisory
https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598
Issue TrackingVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-52660		Advisory
https://github.com/eclipse-milo/milo/commit/db59fae993a3a1bc66fffc8a2796d444b40285fb		Patch
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/183		Issue TrackingPatchVendor Advisory
https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598		Issue TrackingVendor Advisory