PT-2026-53644 · Pypi · Wolfssl

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v4.0

9.3

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

A vulnerability in the handling of verify mode = CERT REQUIRED in the wolfssl Python package (wolfssl-py) causes client certificate requirements to not be fully enforced. 

Because the WOLFSSL VERIFY FAIL IF NO PEER CERT flag was not included, the behavior effectively matched CERT OPTIONAL: a peer certificate was verified if presented, but connections were incorrectly authenticated when no client certificate was provided. 

This results in improper authentication, allowing attackers to bypass mutual TLS (mTLS) client authentication by omitting a client certificate during the TLS handshake. 

The issue affects versions up to and including 5.8.2.

Correção

Identificadores relacionados

PYSEC-2026-575

Produtos afetados

Wolfssl

Referências · 8

• https://github.com/wolfSSL/wolfssl-py/pull/62 · Nota
• https://github.com/wolfSSL/wolfssl-py/commit/b4517dece79f682a8f453abce5cfc0b81bae769d · Nota
• https://github.com/wolfSSL/wolfssl-py/releases/tag/v5.8.4-stable · Nota
• https://github.com/wolfSSL/wolfssl-py · Nota
• https://github.com/advisories/GHSA-vj87-jj27-4h9c · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-15346 · Nota de Segurança
• https://osv.dev/vulnerability/PYSEC-2026-575 · Aviso do Fabricante
• https://pypi.org/project/wolfssl · Nota