A vulnerability was found in janmojzis tinyssh up to 20250501. It has been classified as problematic. Impacted is an unknown function of the file tinyssh/crypto_sign_ed25519_tinyssh.c of the component Ed25519 Signature Handler. This manipulation causes improper verification of cryptographic signature.
This vulnerability is tracked as CVE-2026-4541. The attack is restricted to local execution. Moreover, an exploit is present.
Upgrading the affected component is recommended.
