Vulnerability-Lookup

RHSA-2026:50910

Vulnerability from csaf_redhat - Published: 2026-08-05 20:01 - Updated: 2026-08-21 22:12

Summary

Red Hat Security Advisory: RHTAS 1.4.3 - Tech Preview Release Of the Go based Model Transparency CLI

Severity

Important

Notes

Topic: The Tech Preview release of the Go based RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4

Details: The Go based RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-39831

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-46597

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-681 - Incorrect Conversion between Numeric Types

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

21 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:50910	self
https://access.redhat.com/documentation/en-us/red…	external
https://access.redhat.com/security/cve/CVE-2026-39831	external
https://access.redhat.com/security/cve/CVE-2026-46597	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-39831	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480675	external
https://www.cve.org/CVERecord?id=CVE-2026-39831	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39831	external
https://go.dev/cl/781662	external
https://go.dev/issue/79566	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5019	external
https://access.redhat.com/security/cve/CVE-2026-46597	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480678	external
https://www.cve.org/CVERecord?id=CVE-2026-46597	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46597	external
https://go.dev/cl/781620	external
https://go.dev/issue/79561	external
https://pkg.go.dev/vuln/GO-2026-5013	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "The Tech Preview release of the Go based RHTAS Model Transparency CLI image.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Go based RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:50910",
        "url": "https://access.redhat.com/errata/RHSA-2026:50910"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50910.json"
      }
    ],
    "title": "Red Hat Security Advisory: RHTAS 1.4.3 - Tech Preview Release Of the Go based Model Transparency CLI",
    "tracking": {
      "current_release_date": "2026-08-21T22:12:58+00:00",
      "generator": {
        "date": "2026-08-21T22:12:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:50910",
      "initial_release_date": "2026-08-05T20:01:35+00:00",
      "revision_history": [
        {
          "date": "2026-08-05T20:01:35+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-15T05:55:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-21T22:12:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Trusted Artifact Signer 1.4",
                "product": {
                  "name": "Red Hat Trusted Artifact Signer 1.4",
                  "product_id": "Red Hat Trusted Artifact Signer 1.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Trusted Artifact Signer"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
                  "product_id": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/model-transparency-cli-rhel9@sha256%3A223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/model-transparency-cli-rhel9\u0026tag=1785476106"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64",
                "product": {
                  "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64",
                  "product_id": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/model-transparency-cli-rhel9@sha256%3Abf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1?arch=arm64\u0026repository_url=registry.redhat.io/rhtas/model-transparency-cli-rhel9\u0026tag=1785476106"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
                  "product_id": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/model-transparency-cli-rhel9@sha256%3A09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f?arch=ppc64le\u0026repository_url=registry.redhat.io/rhtas/model-transparency-cli-rhel9\u0026tag=1785476106"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
                "product": {
                  "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
                  "product_id": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/model-transparency-cli-rhel9@sha256%3A5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91?arch=s390x\u0026repository_url=registry.redhat.io/rhtas/model-transparency-cli-rhel9\u0026tag=1785476106"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x"
        },
        "product_reference": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64"
        },
        "product_reference": "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-39831",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-22T04:01:12.861178+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480675"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480675",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781662",
          "url": "https://go.dev/cl/781662"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79566",
          "url": "https://go.dev/issue/79566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5019",
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "release_date": "2026-05-22T02:31:27.436000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T20:01:35+00:00",
          "details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50910"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
    },
    {
      "cve": "CVE-2026-46597",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "discovery_date": "2026-05-22T04:01:21.721980+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480678"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480678",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781620",
          "url": "https://go.dev/cl/781620"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79561",
          "url": "https://go.dev/issue/79561"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5013",
          "url": "https://pkg.go.dev/vuln/GO-2026-5013"
        }
      ],
      "release_date": "2026-05-22T02:31:26.754000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T20:01:35+00:00",
          "details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50910"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:09bc4e06c612f0d6e11874a2255d22f945b2ac064aceca12bb4afd44e27a075f_ppc64le",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:223d49545c116bce2a9622c9c50be27a123c493581c9e324c1966c6b615dbea7_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:5369aaa0b050bf80c17eb43dba4e3fb1004e31205db8735f10ae9c3761a3af91_s390x",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:bf0daf4e60fab5ced2764dc37c5c14291984a7f1f7c8b9605791b22be19d3be1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
    }
  ]
}

CVE-2026-39831 (GCVE-0-2026-39831)

Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-05-22 18:52

Title

Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

Summary

The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 18:51 UTC

CWE

CWE-290 - Authentication Bypass by Spoofing

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79566
https://groups.google.com/g/golang-announce/c/a08…
https://go.dev/cl/781662
https://pkg.go.dev/vuln/GO-2026-5019

Impacted products

1 product

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh	Affected: 0 , < 0.52.0 (semver)

Credits

NCC Group Cryptography Services, sponsored by Teleport

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39831",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T18:51:41.233749Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T18:52:08.344Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh",
          "product": "golang.org/x/crypto/ssh",
          "programRoutines": [
            {
              "name": "CertChecker.CheckCert"
            },
            {
              "name": "skECDSAPublicKey.Verify"
            },
            {
              "name": "skEd25519PublicKey.Verify"
            },
            {
              "name": "connection.serverAuthenticate"
            },
            {
              "name": "CertChecker.Authenticate"
            },
            {
              "name": "CertChecker.CheckHostKey"
            },
            {
              "name": "Certificate.Verify"
            },
            {
              "name": "Dial"
            },
            {
              "name": "NewClientConn"
            },
            {
              "name": "NewServerConn"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.52.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "NCC Group Cryptography Services, sponsored by Teleport"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-290: Authentication Bypass by Spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T02:31:27.436Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79566"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "url": "https://go.dev/cl/781662"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "title": "Invoking  bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39831",
    "datePublished": "2026-05-22T02:31:27.436Z",
    "dateReserved": "2026-04-07T18:13:03.528Z",
    "dateUpdated": "2026-05-22T18:52:08.344Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46597 (GCVE-0-2026-46597)

Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-05-22 14:08

Title

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

Summary

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 14:08 UTC

CWE

CWE-191 - Integer Underflow (Wrap or Wraparound)

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79561
https://groups.google.com/g/golang-announce/c/a08…
https://go.dev/cl/781620
https://pkg.go.dev/vuln/GO-2026-5013

Impacted products

1 product

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh	Affected: 0 , < 0.52.0 (semver)

Credits

Maciej Kawka

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-46597",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T14:08:24.589026Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T14:08:27.674Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh",
          "product": "golang.org/x/crypto/ssh",
          "programRoutines": [
            {
              "name": "gcmCipher.readCipherPacket"
            },
            {
              "name": "Dial"
            },
            {
              "name": "NewClientConn"
            },
            {
              "name": "NewServerConn"
            },
            {
              "name": "curve25519sha256.Client"
            },
            {
              "name": "curve25519sha256.Server"
            },
            {
              "name": "dhGEXSHA.Client"
            },
            {
              "name": "dhGEXSHA.Server"
            },
            {
              "name": "dhGroup.Client"
            },
            {
              "name": "dhGroup.Server"
            },
            {
              "name": "ecdh.Client"
            },
            {
              "name": "ecdh.Server"
            },
            {
              "name": "mlkem768WithCurve25519sha256.Client"
            },
            {
              "name": "mlkem768WithCurve25519sha256.Server"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.52.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Maciej Kawka"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-191: Integer Underflow (Wrap or Wraparound)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T02:31:26.754Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79561"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "url": "https://go.dev/cl/781620"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5013"
        }
      ],
      "title": "Invoking  byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-46597",
    "datePublished": "2026-05-22T02:31:26.754Z",
    "dateReserved": "2026-05-15T17:35:00.813Z",
    "dateUpdated": "2026-05-22T14:08:27.674Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:50910

CVE-2026-39831 (GCVE-0-2026-39831)

CVE-2026-46597 (GCVE-0-2026-46597)

Tags

Sightings

Nomenclature