https://www.yubico.com/support/security-advisories/ysa-2024-03/ The attacker requires physical ownership of the yubikey however so it's more like a wrench attack in some ways.