Read the docs
TI-2026-26253 Aliases CVE-2026-33895GHSA-q67f-28xg-22rw

Forge has signature forgery in Ed25519 due to missing S > L check

Priority HIGH 72CWE-347Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
Partial Red Hat: 6 fixed, 6 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-347.

Summary

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, Ed25519 signature verification accepts forged non-canonical signatures where the scalar S is not reduced modulo the group order (`S >= L`). A valid signature and its `S + L` variant both verify in forge, while Node.js `crypto.verify` (OpenSSL-backed) rejects the `S + L` variant, as defined by the specification. This class of signature malleability has been exploited in practice to bypass authentication and authorization logic (see CVE-2026-25793, CVE-2022-35961). Applications relying on signature uniqueness (i.e., dedup by signature bytes, replay tracking, signed-object canonicalization checks) may be bypassed. Version 1.4.0 patches the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00527 44th percentileScored 2026-11-07
Fix Partial forge (digitalbazaar): 1.4.0node-forge (npm): 1.4.0Red Hat: 5 advisoriesRed Hat: 6 fixed, 6 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
digitalbazaarforgebefore 1.4.01.4.0Patch availableCNA
—node-forge (npm)before 1.4.01.4.0Patch availableGHSA-q67f-28xg-22rw
  • forge Vendordigitalbazaar Affected before 1.4.0 Fixed in 1.4.0 Patch available CNA
  • node-forge (npm) Vendor— Affected before 1.4.0 Fixed in 1.4.0 Patch available GHSA-q67f-28xg-22rw

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:digitalbazaar:forge:*:*:*:*:*:node.js:*:*up to 1.3.3Vulnerabledigitalbazaar
  • cpe:2.3:a:digitalbazaar:forge:*:*:*:*:*:node.js:*:* Versions up to 1.3.3 Vulnerable ·digitalbazaar

Remediation

  • Fix · CNA forge (digitalbazaar) Fixed in 1.4.0
  • Fix · GHSA-q67f-28xg-22rw node-forge (npm) Fixed in 1.4.0 Advisory →

Red Hat 5 advisories

  • RHSA-2026:86618 Released 2026-10-21 · Red Hat rating Critical
    New container image: rhceph-9.2
    • Red Hat Ceph Storage 9.2 registry.redhat.io/rhceph/rhceph-9-rhel10
  • RHSA-2026:34342 Released 2026-07-01 · Red Hat rating Critical
    Cluster Observability Operator 1.5.0
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9 +9
  • RHSA-2026:24761 Released 2026-06-09 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.29-2.el8ap, automation-gateway-proxy-server-2.5.10-6.el8ap, automation-gateway-server-2.5.20260422-3.el8ap +4
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.29-2.el9ap, automation-gateway-proxy-server-2.6.14-3.el9ap, automation-gateway-server-2.5.20260422-3.el9ap +4
Show 2 more Red Hat advisories
  • RHSA-2026:13826 Released 2026-05-05 · Red Hat rating Critical
    Red Hat Developer Hub 1.9.4 release.
    • Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:9742 Released 2026-04-22 · Red Hat rating Critical
    Red Hat Developer Hub 1.8.6 release.
    • Red Hat Developer Hub 1.8 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Logging Subsystem for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Red Hat Build of Podman DesktopAffectedNo fix yet
Red Hat Data Grid 8AffectedNo fix yet
Red Hat Fuse 7AffectedNo fix planned: Will not fix
Red Hat Quay 3AffectedNo fix yet
Red Hat build of Apicurio Registry 2AffectedNo fix yet
Cluster Observability Operator 1.5Fixed RHSA-2026:34342
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:24761
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:24761
Red Hat Ceph Storage 9.2Fixed RHSA-2026:86618
Red Hat Developer Hub 1.8Fixed RHSA-2026:9742
Red Hat Developer Hub 1.9Fixed RHSA-2026:13826
Not affected: 13 products
  • Cluster Observability Operator 1.5
  • Cryostat 4
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ceph Storage 9.2
  • Red Hat Developer Hub 1.8
  • Red Hat Developer Hub 1.9
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Process Automation 7
  • Red Hat build of Apache Camel - HawtIO 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-33895
  2. 2026-10-03 Alias added: GHSA-q67f-28xg-22rw
  3. 2026-10-21 Fix available: RHSA-2026:86618 · Red Hat
  4. 2026-10-21 Fix available: Red Hat Ceph Storage 9.2 · Red Hat
  5. 2026-11-05 Fix available: Cluster Observability Operator 1.5 · Red Hat

References

Patch 1

Advisory 5

Other 1

  • TI-2026-26254 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) CVSS 3.1CRITICAL 9.1
  • TI-2026-82739 ASN.1 resource exhaustion in Forge asn1.fromDer via BIT STRINGs CVSS 3.1HIGH 7.5
  • TI-2026-82735 Denial of service in Forge TLS record processing via stack exhaustion CVSS 3.1HIGH 7.5
  • TI-2026-26252 Forge has signature forgery in RSA-PKCS due to ASN.1 extra field CVSS 3.1HIGH 7.5
  • TI-2026-26249 Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input CVSS 3.1HIGH 7.5
  • TI-2026-82723 Incomplete PKCS#7 padding validation in Forge decryption CVSS 3.1MEDIUM 5.3
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences