CVE-2026-105221
Description
A flaw was found in gist. The utility completely disables Transport Layer Security (TLS) certificate verification when establishing HTTPS connections. An on-path attacker can exploit this flaw by presenting an arbitrary certificate to intercept, read, and manipulate network traffic. This can lead to information disclosure, including the theft of sensitive authentication tokens and credentials, and allow unauthorized modification of user data.
Statement
Red Hat has rated this issue as having a Critical security impact because an on-path adversary can intercept and tamper with encrypted communications without triggering TLS validation errors, leading to the theft of sensitive credentials and API tokens. This standalone command-line client is not shipped with core Red Hat Enterprise Linux offerings, confining exposure primarily to Fedora or developer installations where the utility is specifically installed. Successful exploitation requires an attacker to occupy a privileged position on the local network when requests are initiated by the client.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Integrity,Authentication
Technical Impact: Bypass Protection Mechanism; Gain Privileges or Assume Identity
When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
