A vulnerability classified as problematic has been found in GnuPG up to 2.4.8. Affected by this vulnerability is an unknown functionality of the component Signed Message Handler. Performing manipulation results in improper verification of cryptographic signature.
This vulnerability is reported as CVE-2025-68972. The attack is possible to be carried out remotely. No exploit exists.