CVEsdigitalbazaarCVE-2026-119190Published Oct 29, 19:25 · Updated Oct 29, 20:25 UTC
7.4
HighCVSS 3.1 · from GitHub_M
CVE-2026-119190

Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

forge · Improper certificate validation · CWE-295
Affectedforge
FixNo fix listed yet.
PublishedOct 29, 19:25 · GitHub_M
ScoredOct 29 · 7.4 · GitHub_M
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:08 UTC

What we know

No known exploitation. CISA KEV, checked 22:08 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.
It only works under certain conditions, which makes it harder to pull off. CVSS: high attack complexity.
A successful attack can read data and change data. CVSS impact.
A successful attack gives full control of the affected system. CISA: technical impact total.

Description

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge parsed deprecated extension OIDs 2.5.29.10 and 2.5.29.13 as basicConstraints, and pki.verifyCertificateChain() used the first extension with that name. Exploitation requires a CA trusted by the application to issue a certificate carrying an attacker-supplied deprecated-OID extension, commonly because the CA copies extensions from a certificate signing request. By placing a permissive deprecated extension before the genuine 2.5.29.19 basicConstraints extension, the certificate holder could have the certificate accepted as a CA and issue certificates for arbitrary names, enabling server or client impersonation. If the issuing CA adds a keyUsage extension without keyCertSign, node-forge rejects the chain. This issue is fixed in version 1.4.1.

From GitHub_M

Affected and fixed versions

ProductAffectedFixed inforge< 1.4.1–

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

github.com/digitalbazaar/forge/security/advisories/GHSA-5x38-2vff-x55p · github.comrefsource_CONFIRMgithub.com/digitalbazaar/forge/commit/58c06bc251856b409c30ecb35a93f5f6c9bbc84a · github.comrefsource_MISCgithub.com/digitalbazaar/forge/releases/tag/v1.4.1 · github.comrefsource_MISC

Other CVEs in forge

All 24 →
7.5Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer · CVE-2026-119191Oct 295.9Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage · CVE-2026-119189Oct 297.5Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message · CVE-2026-119188Oct 29