Vulnerability-Lookup

RHSA-2026:50911

Vulnerability from csaf_redhat - Published: 2026-08-05 20:11 - Updated: 2026-08-21 21:50

Summary

Red Hat Security Advisory: RHTAS 1.4.3 - Tech Preview Release Of the Model Validation Operator

Severity

Important

Notes

Topic: The Tech Preview release of the RHTAS Model Validation Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4

Details: The RHTAS Model Validation Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20, 4.21, 4.22

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-39831

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64		—	Vendor Fix fix

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64		—
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64		—

Threats

Impact Important

CVE-2026-46597

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-681 - Incorrect Conversion between Numeric Types

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64		—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64		—	Workaround
Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64		—	Workaround

Threats

Impact Important

References

22 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:50911	self
https://access.redhat.com/documentation/en-us/red…	external
https://access.redhat.com/documentation/en-us/red…	external
https://access.redhat.com/security/cve/CVE-2026-39831	external
https://access.redhat.com/security/cve/CVE-2026-46597	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-39831	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480675	external
https://www.cve.org/CVERecord?id=CVE-2026-39831	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39831	external
https://go.dev/cl/781662	external
https://go.dev/issue/79566	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5019	external
https://access.redhat.com/security/cve/CVE-2026-46597	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480678	external
https://www.cve.org/CVERecord?id=CVE-2026-46597	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46597	external
https://go.dev/cl/781620	external
https://go.dev/issue/79561	external
https://pkg.go.dev/vuln/GO-2026-5013	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "The Tech Preview release of the RHTAS Model Validation Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The RHTAS Model Validation Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20, 4.21, 4.22",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:50911",
        "url": "https://access.redhat.com/errata/RHSA-2026:50911"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50911.json"
      }
    ],
    "title": "Red Hat Security Advisory: RHTAS 1.4.3 - Tech Preview Release Of the Model Validation Operator",
    "tracking": {
      "current_release_date": "2026-08-21T21:50:37+00:00",
      "generator": {
        "date": "2026-08-21T21:50:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:50911",
      "initial_release_date": "2026-08-05T20:11:58+00:00",
      "revision_history": [
        {
          "date": "2026-08-05T20:11:58+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-15T05:55:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-21T21:50:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Trusted Artifact Signer 1.4",
                "product": {
                  "name": "Red Hat Trusted Artifact Signer 1.4",
                  "product_id": "Red Hat Trusted Artifact Signer 1.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Trusted Artifact Signer"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64",
                  "product_id": "registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/model-validation-rhel9-operator@sha256%3A356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/model-validation-rhel9-operator\u0026tag=1785487936"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
                  "product_id": "registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/model-validation-agent-rhel9@sha256%3A95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/model-validation-agent-rhel9\u0026tag=1785487936"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64",
                  "product_id": "registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/model-validation-operator-bundle@sha256%3A5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/model-validation-operator-bundle\u0026tag=1785487936"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-39831",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-22T04:01:12.861178+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480675"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64"
        ],
        "known_not_affected": [
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480675",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781662",
          "url": "https://go.dev/cl/781662"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79566",
          "url": "https://go.dev/issue/79566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5019",
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "release_date": "2026-05-22T02:31:27.436000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T20:11:58+00:00",
          "details": "The Model Validation Operator is a Go-based Kubernetes operator for OpenShift that validates AI/ML models and their signatures at pod runtime. It verifies signatures on model and container artifacts before workloads are allowed to run.\n\nPlatform Engineers, ML practitioners, and Security teams use it to ensure only trusted, compliant models execute on OCP clusters, in both connected and disconnected environments.\n\nFor details on using the RHTAS Model Validation Operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50911"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
    },
    {
      "cve": "CVE-2026-46597",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "discovery_date": "2026-05-22T04:01:21.721980+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480678"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64"
        ],
        "known_not_affected": [
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480678",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781620",
          "url": "https://go.dev/cl/781620"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79561",
          "url": "https://go.dev/issue/79561"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5013",
          "url": "https://pkg.go.dev/vuln/GO-2026-5013"
        }
      ],
      "release_date": "2026-05-22T02:31:26.754000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T20:11:58+00:00",
          "details": "The Model Validation Operator is a Go-based Kubernetes operator for OpenShift that validates AI/ML models and their signatures at pod runtime. It verifies signatures on model and container artifacts before workloads are allowed to run.\n\nPlatform Engineers, ML practitioners, and Security teams use it to ensure only trusted, compliant models execute on OCP clusters, in both connected and disconnected environments.\n\nFor details on using the RHTAS Model Validation Operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50911"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-agent-rhel9@sha256:95b65949baf82e72266e1e08827318e714bf71e4a1c8716877851483134eb2db_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-operator-bundle@sha256:5ee2989bd15baaaf11684cfcb3b79183d1958be048303235d04c4a14a261718b_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-validation-rhel9-operator@sha256:356e32a685260088ce56bbf6f6e8cd2552c60508f30a75c998dbac538fb54f99_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
    }
  ]
}

CVE-2026-39831 (GCVE-0-2026-39831)

Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-05-22 18:52

Title

Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

Summary

The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 18:51 UTC

CWE

CWE-290 - Authentication Bypass by Spoofing

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79566
https://groups.google.com/g/golang-announce/c/a08…
https://go.dev/cl/781662
https://pkg.go.dev/vuln/GO-2026-5019

Impacted products

1 product

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh	Affected: 0 , < 0.52.0 (semver)

Credits

NCC Group Cryptography Services, sponsored by Teleport

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39831",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T18:51:41.233749Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T18:52:08.344Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh",
          "product": "golang.org/x/crypto/ssh",
          "programRoutines": [
            {
              "name": "CertChecker.CheckCert"
            },
            {
              "name": "skECDSAPublicKey.Verify"
            },
            {
              "name": "skEd25519PublicKey.Verify"
            },
            {
              "name": "connection.serverAuthenticate"
            },
            {
              "name": "CertChecker.Authenticate"
            },
            {
              "name": "CertChecker.CheckHostKey"
            },
            {
              "name": "Certificate.Verify"
            },
            {
              "name": "Dial"
            },
            {
              "name": "NewClientConn"
            },
            {
              "name": "NewServerConn"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.52.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "NCC Group Cryptography Services, sponsored by Teleport"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-290: Authentication Bypass by Spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T02:31:27.436Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79566"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "url": "https://go.dev/cl/781662"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "title": "Invoking  bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39831",
    "datePublished": "2026-05-22T02:31:27.436Z",
    "dateReserved": "2026-04-07T18:13:03.528Z",
    "dateUpdated": "2026-05-22T18:52:08.344Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46597 (GCVE-0-2026-46597)

Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-05-22 14:08

Title

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

Summary

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 14:08 UTC

CWE

CWE-191 - Integer Underflow (Wrap or Wraparound)

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79561
https://groups.google.com/g/golang-announce/c/a08…
https://go.dev/cl/781620
https://pkg.go.dev/vuln/GO-2026-5013

Impacted products

1 product

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh	Affected: 0 , < 0.52.0 (semver)

Credits

Maciej Kawka

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-46597",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T14:08:24.589026Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T14:08:27.674Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh",
          "product": "golang.org/x/crypto/ssh",
          "programRoutines": [
            {
              "name": "gcmCipher.readCipherPacket"
            },
            {
              "name": "Dial"
            },
            {
              "name": "NewClientConn"
            },
            {
              "name": "NewServerConn"
            },
            {
              "name": "curve25519sha256.Client"
            },
            {
              "name": "curve25519sha256.Server"
            },
            {
              "name": "dhGEXSHA.Client"
            },
            {
              "name": "dhGEXSHA.Server"
            },
            {
              "name": "dhGroup.Client"
            },
            {
              "name": "dhGroup.Server"
            },
            {
              "name": "ecdh.Client"
            },
            {
              "name": "ecdh.Server"
            },
            {
              "name": "mlkem768WithCurve25519sha256.Client"
            },
            {
              "name": "mlkem768WithCurve25519sha256.Server"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.52.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Maciej Kawka"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-191: Integer Underflow (Wrap or Wraparound)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T02:31:26.754Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79561"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "url": "https://go.dev/cl/781620"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5013"
        }
      ],
      "title": "Invoking  byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-46597",
    "datePublished": "2026-05-22T02:31:26.754Z",
    "dateReserved": "2026-05-15T17:35:00.813Z",
    "dateUpdated": "2026-05-22T14:08:27.674Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:50911

CVE-2026-39831 (GCVE-0-2026-39831)

CVE-2026-46597 (GCVE-0-2026-46597)

Tags

Sightings

Nomenclature