CVE-2025-68134
HIGHEVerest < 2025.10.0 - Denial of Service via Assert Function Error Handling
Title source: llmDescription
EVerest is an EV charging software stack. Prior to version 2025.10.0, the use of the `assert` function to handle errors frequently causes the module to crash. This is particularly critical because the manager shuts down all other modules and exits when any one of them terminates, leading to a denial of service. In a context where a manager handles multiple EVSE, this would also impact other users. Version 2025.10.0 fixes the issue.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://github.com/EVerest/everest-core/security/advisories/GHSA-cxc5-rrj5-8pf3
Scores
CVSS v3
7.4
EPSS
0.0008
EPSS Percentile
24.5%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-20
Status
published
Products (1)
linuxfoundation/everest
< 2025.10.0
Published
Jan 21, 2026
Tracked Since
Feb 18, 2026