Forge certificate chain validation accepts forged CA certificates
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Partial Red Hat: 13 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-295.
Summary
Forge (node-forge) before 1.4.1 parses the deprecated extension OIDs 2.5.29.10 and 2.5.29.13 as basicConstraints. The pki.verifyCertificateChain() function uses the first extension with that name, so a permissive deprecated-OID extension placed before the genuine one lets the holder of a certificate act as a CA (CWE-295). Exploitation requires a trusted CA that copies extensions from a certificate signing request, and it allows issuing certificates for arbitrary names and impersonating servers or clients.
Written with Claude Haiku 5.5 from the sources below · 2026-11-06
Description from the CNA
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge parsed deprecated extension OIDs 2.5.29.10 and 2.5.29.13 as basicConstraints, and pki.verifyCertificateChain() used the first extension with that name. Exploitation requires a CA trusted by the application to issue a certificate carrying an attacker-supplied deprecated-OID extension, commonly because the CA copies extensions from a certificate signing request. By placing a permissive deprecated extension before the genuine 2.5.29.19 basicConstraints extension, the certificate holder could have the certificate accepted as a CA and issue certificates for arbitrary names, enabling server or client impersonation. If the issuing CA adds a keyUsage extension without keyCertSign, node-forge rejects the chain. This issue is fixed in version 1.4.1.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| digitalbazaar | forge | before 1.4.1 | 1.4.1 | Patch available | CNA |
| — | node-forge (npm) | before 1.4.1 | 1.4.1 | Patch available | GHSA-5x38-2vff-x55p |
- forge Vendordigitalbazaar Affected before 1.4.1 Fixed in 1.4.1 Patch available CNA
- node-forge (npm) Vendor— Affected before 1.4.1 Fixed in 1.4.1 Patch available GHSA-5x38-2vff-x55p
CPE names Threatist (inferred) · 1
Inferred from how NVD named this product before; not given by a source.
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:digitalbazaar:forge:*:*:*:*:*:*:*:* | — | — | digitalbazaar |
- cpe:2.3:a:digitalbazaar:forge:*:*:*:*:*:*:*:* Versions — — ·digitalbazaar
Remediation
Upgrade digitalbazaar forge and the npm package node-forge to 1.4.1, which fixes the flaw. Red Hat rates it Important and lists these products as affected with plan none_available: Node HealthCheck Operator, OpenShift Pipelines, OpenShift Serverless, Red Hat AMQ Broker 7, Red Hat Ansible Automation Platform 2, and other products.
Written with Claude Haiku 5.5 from the sources below · 2026-11-06
- Fix · CNA forge (digitalbazaar) Fixed in 1.4.1
- Fix · GHSA-5x38-2vff-x55p node-forge (npm) Fixed in 1.4.1 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Node HealthCheck Operator | Affected | No fix yet |
| OpenShift Pipelines | Affected | No fix yet |
| OpenShift Serverless | Affected | No fix yet |
| Red Hat AMQ Broker 7 | Affected | No fix yet |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet |
| Red Hat Build of Podman Desktop | Affected | No fix yet |
| Red Hat Ceph Storage 4 | Affected | No fix yet: Fix deferred |
| Red Hat Connectivity Link 1 | Affected | No fix yet |
| Red Hat Developer Hub 1 | Affected | No fix yet |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix yet |
| Red Hat Fuse 7 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet |
| Self-service automation portal 2 | Affected | No fix yet |
Not affected: 8 products
- OpenShift Service Mesh 3
- Red Hat AMQ Broker 7
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Hardened Images
- Red Hat Quay 3
- Red Hat build of Apache Camel for Spring Boot 4
Timeline
- 2026-10-29 Threatist record created from CVE-2026-119190
- 2026-10-29 CISA SSVC decision points changed
- 2026-10-29 Priority changed: MEDIUM → HIGH
- 2026-10-30 Alias added: GHSA-5x38-2vff-x55p
- 2026-10-30 Fix available: npm/[email protected] · GHSA-5x38-2vff-x55p
- 2026-10-30 CVSS score added · GHSA-5x38-2vff-x55p
- 2026-10-30 Weakness changed · GHSA-5x38-2vff-x55p
- 2026-10-30 5 new references · GHSA-5x38-2vff-x55p
- 2026-11-06 Affected versions changed · Red Hat
- 2026-11-06 CVSS score added · Red Hat
- 2026-11-06 Affected versions changed · Red Hat
References
More digitalbazaar vulnerabilities
- TI-2026-58601 node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding CVSS 4.0HIGH 8.7
- TI-2026-26254 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) CVSS 3.1CRITICAL 9.1
- TI-2026-82739 ASN.1 resource exhaustion in Forge asn1.fromDer via BIT STRINGs CVSS 3.1HIGH 7.5
- TI-2026-82735 Denial of service in Forge TLS record processing via stack exhaustion CVSS 3.1HIGH 7.5
- TI-2026-82733 Forge accepts zero iteration count, enabling PKCS#12 integrity bypass CVSS 3.1HIGH 7.5
- TI-2026-82730 Regular expression denial of service in Forge PEM decoding CVSS 3.1HIGH 7.5
Sources
- CVE-2026-119190 · CVE Program
- CVE-2026-119190 · NVD
- FIRST EPSS
- GHSA-5x38-2vff-x55p · GitHub Advisory Database · CC BY 4.0
- CVE-2026-119190 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences