PT-2026-27055 · Jsrsasign · Jsrsasign

Kr0Emer · CVE-2026-4599 · Published 2026-03-23 · Updated 2026-07-01

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions jsrsasign versions 7.0.0 through 11.1.1

Description An issue exists involving incomplete comparison with missing factors within the getRandomBigIntegerZeroToMax() and getRandomBigIntegerMinToMax() functions located in src/crypto-1.1.js. An attacker can recover the private key by exploiting incorrect compareTo checks that accept out-of-range candidates, which biases DSA nonces during the signature generation process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-338

CWE-1023

Related Identifiers

CVE-2026-4599

GHSA-5JX8-Q4CP-RHH6

Affected Products

Jsrsasign

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4599.json · Exploit
• 🔥 https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20 · Exploit
• https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1 · Patch
• https://access.redhat.com/errata/RHSA-2026:6926 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6568 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:19375 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:19410 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-4599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4599 · Security Note
• https://osv.dev/vulnerability/GHSA-5jx8-q4cp-rhh6 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6720 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6912 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:19409 · Vendor Advisory
• https://github.com/kjur/jsrsasign · Note
• https://github.com/kjur/jsrsasign/pull/647 · Note