A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade the affected component. The GitHub repository of this project is not available anymore. This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Invariant-systems-ai
  • Aiir

No data.

No data.

References
Link Providers
https://github.com/advisories/GHSA-73p9-6hrp-8qhr cve-icon cve-icon
https://github.com/invariant-systems-ai/aiir/ cve-icon cve-icon
https://github.com/invariant-systems-ai/aiir/security/advisories/GHSA-73p9-6hrp-8qhr cve-icon cve-icon
https://vuldb.com/cve/CVE-2026-105161 cve-icon cve-icon
https://vuldb.com/vuln/413387 cve-icon cve-icon
https://vuldb.com/vuln/413387/cti cve-icon cve-icon
History

Tue, 06 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 04 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Description A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade the affected component. The GitHub repository of this project is not available anymore. This vulnerability only affects products that are no longer supported by the maintainer.
Title invariant-systems-ai aiir Policy Gate signature verification
First Time appeared Invariant-systems-ai
Invariant-systems-ai aiir
Weaknesses CWE-345
CWE-347
CPEs cpe:2.3:a:invariant-systems-ai:aiir:*:*:*:*:*:*:*:*
Vendors & Products Invariant-systems-ai
Invariant-systems-ai aiir
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:N/I:P/A:N/E:ND/RL:OF/RC:C'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:X/RL:O/RC:C'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:X/RL:O/RC:C'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X'}
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-10-04T16:30:10.216Z

Updated: 2026-10-06T22:02:32.018Z

Reserved: 2026-10-04T03:13:29.438Z

Link: CVE-2026-105161

cve-icon Vulnrichment

Updated: 2026-10-06T22:02:27.788Z

cve-icon NVD

Status : Deferred

Published: 2026-10-04T18:16:33.560

Modified: 2026-10-06T23:16:54.177

Link: CVE-2026-105161

cve-icon Redhat

No data.