Red Hat Security Advisory

RHSA-2026:50910

RHTAS 1.4.3 - Tech Preview Release Of the Go based Model Transparency CLI

Released 2026-08-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.4 registry.redhat.io/rhtas/model-transparency-cli-rhel9

TI-2026-28713 CVE-2026-39831 · GHSA-89gr-r52h-f8rx

MEDIUM 48

The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence flag.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00478 Published 2026-05-22 Partial fix · 0.52.0 CWE-862

TI-2026-34256 CVE-2026-46597 · GHSA-q4h4-gmj2-qvw2

LOW 39

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00473 Published 2026-05-22 Partial fix · 0.52.0 CWE-704