CVE-2026-115570
Description
A flaw was found in Electron. The framework fails to properly block compromised intermediate digital certificates across its internal networking and communication components. A remote attacker capable of intercepting network traffic and possessing a certificate issued by a compromised authority can exploit this flaw to impersonate a trusted Transport Layer Security (TLS) server. Consequently, this can allow an attacker to intercept, inspect, or modify sensitive data exchanged by the application.
Statement
This vulnerability is rated as Important severity because an attacker in a machine-in-the-middle position holding certificates from the compromised certificate authority can successfully impersonate legitimate endpoints, directly compromising communication privacy and data integrity without user interaction. Exposure within Red Hat environments is confined to developer tools or desktop workloads packaging Electron that establish external TLS connections over untrusted paths. Core enterprise server environments and isolated applications making no outbound network connections are not impacted.
Understanding the Weakness (CWE)
Integrity,Authentication
Technical Impact: Bypass Protection Mechanism; Gain Privileges or Assume Identity
When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
