CVE-2026-60007 is a critical vulnerability in Eclipse Milo (version 0.6.0 specifically noted) where the username-token processing leaks error information that differentiates invalid RSA PKCS#1 v1.5 padding from other authentication failures. This allows an on-path attacker who has captured a Basic128Rsa15-encrypted username token to perform a padding oracle attack by sending repeated unauthenticated ActivateSession requests. Through this attack, the adversary can recover the victim's password and subsequently authenticate using the recovered credentials. The vulnerability is classified under CWE-204 (Information Exposure Through Discrepancy).

An attacker with network access who captures an encrypted username token can exploit this vulnerability to recover the victim's password without authentication. This leads to unauthorized access by authenticating with the recovered credentials, posing a critical security risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time.