CWE-322: Key Exchange without Entity Authentication
The product performs a key exchange with an actor without verifying the identity of that actor.
Last updated
Overview
Performing a key exchange will preserve the integrity of the information sent between two entities, but this will not guarantee that the entities are who they claim they are. This may enable an attacker to impersonate an actor by modifying traffic between the two entities. Typically, this involves a victim client that contacts a malicious server that is impersonating a trusted server. If the client skips authentication or ignores an authentication failure, the malicious server may request authentication information from the user. The malicious server can then use this authentication information to log in to the trusted server using the victim's credentials, sniff traffic between the victim and trusted server, etc.
Real-world CVEs
17 recorded CVEs are caused by CWE-322 (Key Exchange without Entity Authentication). The highest-severity and most recent are shown first. 8 new CWE-322 CVEs have been recorded so far in 2026 (2 in 2025).
- CVE-2026-1709
Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication
Critical · CVSS 9.8 · EPSS 92th2026-02-06 - CVE-2026-11745High · CVSS 8.8 · EPSS 12th2026-06-22
- CVE-2025-20163
Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability
High · CVSS 8.7 · EPSS 34th2025-06-04 - CVE-2022-39250
Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
High · CVSS 8.6 · EPSS 59th2022-09-29 - CVE-2022-39255
Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion
High · CVSS 8.6 · EPSS 54th2022-09-28 - CVE-2022-39251High · CVSS 8.6 · EPSS 59th2022-09-28
- CVE-2024-47519High · CVSS 8.3 · EPSS 27th2025-01-10
- CVE-2026-58065
Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification
High · CVSS 8.1 · EPSS 52th2026-07-13 - CVE-2026-45361
Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)
High · CVSS 8.1 · EPSS 46th2026-05-25 - CVE-2021-34433High · CVSS 7.5 · EPSS 27th2021-08-20
- CVE-2025-13914
Apstra: SSH host key validation vulnerability for managed devices
High · CVSS 7.0 · EPSS 23th2026-04-09 - CVE-2025-62501
SSH Hostkey Misconfiguration Vulnerability in TP-Link Archer AX53
High · CVSS 7.0 · EPSS 38th2026-02-03
Showing 12 of 17 recorded CWE-322 CVEs. Track new ones as they are published and get AI-written analysis and fixes.
Monitor CWE-322 vulnerabilitiesCommon consequences
What can happen when CWE-322 is exploited.
Bypass Protection Mechanism
Affects: Access Control
No authentication takes place in this process, bypassing an assumed protection of encryption.
Read Application Data
Affects: Confidentiality
The encrypted communication between a user and a trusted host may be subject to sniffing by any actor in the communication path.
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
How to prevent it
Practical mitigations for CWE-322, grouped by where in the lifecycle they apply.
Ensure that proper authentication is included in the system design.
Understand and properly implement all checks necessary to ensure the identity of entities involved in encrypted communications.
How to detect it
Automated Static Analysis
Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)
Code examples
Illustrative examples from MITRE showing how the weakness appears in code.
Many systems have used Diffie-Hellman key exchange without authenticating the entities exchanging keys, allowing attackers to influence communications by redirecting or interfering with the communication path. Many people using SSL/TLS skip the authentication (often unknowingly).
Terminology & mappings
Mapped taxonomies
- CLASP: Key exchange without entity authentication
Frequently asked questions
Common questions about CWE-322.
- What is CWE-322?
- The product performs a key exchange with an actor without verifying the identity of that actor.
- What CVEs are caused by CWE-322?
- 17 recorded CVEs are attributed to CWE-322, including CVE-2026-1709, CVE-2026-11745, CVE-2025-20163.
- How do you prevent CWE-322?
- Ensure that proper authentication is included in the system design.
- How is CWE-322 detected?
- Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)
- What are the consequences of CWE-322?
- Exploiting CWE-322 can lead to: Bypass Protection Mechanism, Read Application Data.
- Is CWE-322 actively exploited?
- 17 recorded CVEs are caused by CWE-322; none are currently in CISA's KEV catalog of actively exploited flaws.
References
- MITRE CWE definition (CWE-322) (opens in a new tab)
- CWE-322 vulnerabilities on NVD (opens in a new tab)
- Learn: What is a CWE?
Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.
Stay ahead of CWE-322
Get alerted the moment a new CWE-322 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.