CVE-2026-65626
Description
A flaw was found in the jose library. The fallback RSA decryption mechanism reveals whether decrypted data has valid padding through distinguishable error responses and timing discrepancies. An unauthenticated attacker can exploit this vulnerability by submitting a series of specially crafted encrypted messages to a decryption service. This flaw leads to information disclosure, allowing the attacker to decrypt sensitive message payloads or forge cryptographic signatures without possessing the private key.
Statement
This vulnerability is rated as Moderate impact because successful exploitation requires high attack complexity, necessitating thousands of adaptive chosen-ciphertext queries against an exposed decryption endpoint under non-default conditions. In typical Red Hat deployments, cryptographic operations rely on native Erlang/OTP routines rather than the pure-Erlang software fallback implementation. Consequently, environments operating under default configurations that utilize native cryptographic routines are not exposed to this Bleichenbacher padding oracle flaw.
Understanding the Weakness (CWE)
Confidentiality,Access Control
Technical Impact: Read Application Data; Bypass Protection Mechanism
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
