Security researchers have discovered a cryptographic flaw that leaves the YubiKey 5 vulnerable to attack.