Bitlocker Bypass, AI Trust Exploits, and FreeBSD RCE Disclosures

Today's Highlights

This week's top security news features a swift Bitlocker downgrade attack (CVE-2025-48804), critical trust persistence flaws in major AI code assistants, and a detailed breakdown of a Remote Code Execution (RCE) vulnerability in FreeBSD (CVE-2026-42511).

Bypassing Bitlocker under 5 min using downgrade attack on CVE-2025-48804 (r/netsec)

Source: https://reddit.com/r/netsec/comments/1t6cfwx/bypassing_bitlocker_under_5_min_using_downgrade/

A newly disclosed vulnerability, tracked as CVE-2025-48804, allows for a rapid bypass of Bitlocker encryption, potentially under five minutes, using a sophisticated downgrade attack. This exploit targets a weakness in how certain hardware or firmware components interact with Bitlocker's boot process, enabling an attacker with physical access to downgrade the security mechanisms. Specifically, the attack leverages a window during system boot where an attacker can manipulate the boot sequence or firmware settings to inject malicious code or access unencrypted data before Bitlocker fully engages or after it has been deceptively disengaged.

The practical implications of such a quick bypass are significant. It means that physical security, often seen as a secondary defense layer for data at rest, becomes paramount. Devices protected solely by Bitlocker could be susceptible to data exfiltration or tampering if they fall into an attacker's hands, even briefly. Defensive techniques involve ensuring all firmware is up-to-date, implementing secure boot configurations that prevent unauthorized bootloader modifications, and utilizing strong TPM attestation. Organizations should review their endpoint security policies, considering multi-factor authentication for boot processes or employing additional disk encryption layers for highly sensitive data. The ease and speed of this attack highlight the critical need for defense-in-depth strategies that do not rely on a single control.

Comment: This exploit makes it terrifyingly easy to access data on physically seized devices. It underscores that even full disk encryption like Bitlocker isn't a silver bullet without comprehensive physical and firmware security.

Approve Once, Exploit Forever: The Trust Persistence Problem in Claude Code, Codex and Gemini-CLI (r/netsec)

Source: https://reddit.com/r/netsec/comments/1t68eim/approve_once_exploit_forever_the_trust/

Researchers have identified a "trust persistence" vulnerability in leading AI code assistants, specifically citing Claude Code, Codex, and Gemini-CLI. This flaw arises from the models' tendency to maintain persistent trust in user-approved actions or contexts, even across separate sessions or seemingly distinct prompts. Essentially, an initial approval for a seemingly harmless action can inadvertently grant the AI assistant a long-term "trusted" status that can later be exploited. This is akin to a user granting broad, persistent permissions to an application based on a single, limited request, leading to potential privilege escalation or arbitrary code execution in subsequent interactions.

The mechanism often involves the AI interpreting its prior approved state as a mandate for future operations, making it susceptible to refined prompt injection or contextual manipulation. For instance, if a user approves an AI to "access project files" for a specific task, the AI might retain that permission indefinitely, allowing a malicious actor (or a subsequent, cleverly crafted prompt from the same user) to execute unauthorized operations or exfiltrate sensitive data later without requiring explicit re-approval. The implications are severe for development environments, where these tools are deeply integrated. Developers risk creating supply chain vulnerabilities or exposing their codebases if these AI assistants are compromised or misused. Mitigation requires AI models to implement more granular, ephemeral trust mechanisms, similar to principle of least privilege, with frequent re-authentication or re-authorization for sensitive actions.

Comment: This exposes a critical blind spot in AI security: the subtle way AI models manage trust over time. It's a wake-up call for developers relying on these tools to treat AI permissions with the same rigor as traditional system access controls.

CVE-2026-42511 Breakdown: RCE in FreeBSD (r/netsec)

Source: https://reddit.com/r/netsec/comments/1t6fsfr/cve202642511_breakdown_rce_in_freebsd/

A critical remote code execution (RCE) vulnerability, identified as CVE-2026-42511, has been disclosed affecting the FreeBSD operating system. This vulnerability allows an unauthenticated attacker to execute arbitrary code with elevated privileges on a vulnerable FreeBSD system, making it an extremely high-severity flaw. While specific technical details regarding the affected component and exploit vector are still emerging, an RCE in a core operating system like FreeBSD is particularly concerning due to its widespread use in servers, network appliances, and critical infrastructure.

The impact of such an RCE can range from complete system compromise, data theft, and disruption of services to the deployment of persistent backdoors. Attackers could leverage this vulnerability to establish control over compromised systems, launch further attacks on internal networks, or integrate them into botnets. System administrators managing FreeBSD installations must prioritize patching this vulnerability immediately upon the availability of official security updates. In the interim, implementing strict network segmentation, limiting exposed services, and closely monitoring system logs for unusual activity are crucial defensive measures. This incident underscores the ongoing challenge of securing foundational operating systems and the imperative for rapid response to critical vulnerabilities to protect networked systems from widespread exploitation.

Comment: An RCE in FreeBSD is as bad as it sounds for anyone running it in production. Patching needs to be the absolute top priority for sysadmins, as it opens up the entire system to takeover.