A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Red Hat
  • Enterprise Linux
Redhat
  • Ansible Automation Platform
  • Ansible Automation Platform Developer
  • Confidential Compute Attestation
  • Cost Management On Premise
  • Enterprise Linux
  • Hardened Images
  • Hummingbird
  • Openshift
  • Openshift Container Platform
  • Satellite
  • Satellite 6
  • Trusted Profile Analyzer
Sequoia-pgp
  • Sequoia-openpgp

No data.

No data.

References
Link Providers
https://access.redhat.com/errata/RHSA-2026:34160 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:42078 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:42902 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:76733 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:76734 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:76735 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:76737 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:79357 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2026-42784 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2464122 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-42784 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-42784 cve-icon
History

Fri, 09 Oct 2026 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat ansible Automation Platform Developer
CPEs cpe:/a:redhat:ansible_automation_platform:2.6::el9
cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9
Vendors & Products Redhat ansible Automation Platform Developer
References

Fri, 09 Oct 2026 01:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat cost Management On Premise
CPEs cpe:/a:redhat:cost_management_on_premise:1::el10
Vendors & Products Redhat cost Management On Premise
References

Wed, 07 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
References

Tue, 06 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
References

Tue, 06 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9::crb
cpe:/o:redhat:enterprise_linux:9::baseos
References

Tue, 06 Oct 2026 13:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10.2
References

Mon, 21 Sep 2026 11:00:00 +0000

Type Values Removed Values Added
References

Sat, 19 Sep 2026 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Red Hat
Red Hat enterprise Linux
Redhat hardened Images
Redhat openshift Container Platform
Redhat satellite 6
Sequoia-pgp
Sequoia-pgp sequoia-openpgp
Vendors & Products Red Hat
Red Hat enterprise Linux
Redhat hardened Images
Redhat openshift Container Platform
Redhat satellite 6
Sequoia-pgp
Sequoia-pgp sequoia-openpgp

Fri, 18 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 17 Sep 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Important

Wed, 16 Sep 2026 17:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.
Title Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
First Time appeared Redhat
Redhat ansible Automation Platform
Redhat confidential Compute Attestation
Redhat enterprise Linux
Redhat hummingbird
Redhat openshift
Redhat satellite
Redhat trusted Profile Analyzer
Weaknesses CWE-347
CPEs cpe:/a:redhat:ansible_automation_platform:2
cpe:/a:redhat:confidential_compute_attestation:1
cpe:/a:redhat:hummingbird:1
cpe:/a:redhat:openshift:4
cpe:/a:redhat:satellite:6
cpe:/a:redhat:trusted_profile_analyzer:2
cpe:/a:redhat:trusted_profile_analyzer:3
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat ansible Automation Platform
Redhat confidential Compute Attestation
Redhat enterprise Linux
Redhat hummingbird
Redhat openshift
Redhat satellite
Redhat trusted Profile Analyzer
References
Metrics cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2026-09-16T16:56:11.638Z

Updated: 2026-10-15T14:40:31.579Z

Reserved: 2026-04-29T15:09:53.696Z

Link: CVE-2026-42784

cve-icon Vulnrichment

Updated: 2026-09-18T18:12:24.733Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-16T17:17:18.380

Modified: 2026-10-09T10:16:37.783

Link: CVE-2026-42784

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-16T00:00:00Z

Links: CVE-2026-42784 - Bugzilla