CVE-2025-59324

Received Received - Intake

CryptoPro Secure Disk LUKS Encryption Validation Bypass

Publication date: 2026-08-12

Last updated on: 2026-08-13

Assigner: MITRE

Description

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-13

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-31

NVD

CVE-2025-59324

EUVD

EUVD-2025-210713

Affected Vendors & Products

Vendor	Product	Version / Range
cpsd	cryptopro_secure_disk	to 7.7.4 (exc)
cpsd	crypto_pro_secure_disk	to 7.7.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-347	The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

Executive Summary

CPSD CryptoPro Secure Disk for Bitlocker before version 7.7.4 does not correctly validate LUKS encryption. When encryption is detected, all file integrity checks by CryptoPro are bypassed, potentially allowing unauthorized access or tampering.

Detection Guidance

Detection involves checking the installed version of CPSD CryptoPro Secure Disk. If the version is below 7.7.4 and LUKS encryption is used, the system may be vulnerable. Verify the software version via package managers or installed program lists.

Impact Analysis

This flaw could let attackers bypass security checks on encrypted files, leading to data breaches or unauthorized modifications. Users relying on CryptoPro for file integrity may face compromised data without detection.

Compliance Impact

This vulnerability may lead to non-compliance with GDPR and HIPAA due to skipped file integrity checks and potential exposure of encrypted data. Failure to validate LUKS encryption undermines data protection requirements under these regulations.

Mitigation Strategies

Update CPSD CryptoPro Secure Disk for Bitlocker to version 7.7.4 or later to ensure proper LUKS encryption validation and file integrity checks are enforced.

Hi! I’m here to help you understand CVE-2025-59324. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70