Skip to main content

Introducing open weights model Apex Flash-1
All disclosures

Vulnerability disclosure

Unsolicited raw public key selection bypasses server authentication

CVE-2026-89136

Affected product
wolfSSL
Severity
High · CVSS 8.3
Weakness
CWE-287
Disclosed

Summary

A malicious server could select RawPublicKey without the client offering it, bypassing expected authentication in TLS 1.2, TLS 1.3, and DTLS 1.2 clients. Affects wolfSSL 5.6.0 through 5.9.2 with HAVE_RPK enabled, including --enable-rpk, --enable-all, or --enable-distro builds. Raw Public Key support is off by default. Fixed in wolfSSL 5.9.4.

Technical analysis

The accompanying research article explains the finding, reproduction, and remediation status.

Read the technical write-up

Disclosure timeline

Public disclosure

Credits

Reported by Christos Papakonstantinou (Cantina Security), as credited by wolfSSL and the CVE record. Remediation by the wolfSSL team.

References