CVE-2025-67825: Gonitro Nitro PDF Pro

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather than from the verified certificate subject. This could allow a document to present inconsistent signer details. The display logic was updated to ensure signer information consistently reflects the verified certificate identity.

Affected products

• Gonitro Nitro PDF Pro: before 14.42.0.34 (fixed in 14.42.0.34)

Published 2026-01-08. Last modified 2026-06-17.