CVE-2023-5255: Puppet Enterprise

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.

Affected products

• Puppet Puppet Enterprise: version 2023.3 only
• Puppet Puppet Server: version 8.2.0 only; version 8.2.1 only

Published 2023-10-03. Last modified 2026-06-17.