---
id: CVE-2026-48815
title: >-
  sigstore: Sigstore: Unauthorized certificates accepted due to ignored
  `certificateOIDs` verification option (CVE-2026-48815)
summary: >-
  A flaw was found in sigstore. The `certificateOIDs` option, intended to
  restrict which certificates can sign artifacts, is accepted by the public
  application programming interface (API) but is not used during the
  verification process. This…
severity: medium
cvss: 5.9
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
cvssSource: vendor
cwe:
  - CWE-345
  - CWE-347
vendor: Red Hat
product: Red Hat Enterprise Linux 8
affected:
  - exploit_intelligence
  - connectivity_link 1
  - enterprise_linux 10
  - enterprise_linux 8
  - enterprise_linux 9
  - enterprise_linux_ai_rhel_ai 3
patched:
  - sigstore 4.1.1
published: '2026-07-01'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T10:38:21+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48815.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48815.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-48815'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2499687'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-48815'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-48815'
  - url: 'https://github.com/sigstore/sigstore-js/pull/1658/changes'
  - url: >-
      https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr
  - url: 'https://github.com/advisories/GHSA-52v5-jr5w-gjxr'
tags:
  - csaf
  - vex
  - red-hat
  - ghsa
  - npm
epss: 0.0019
epssPercentile: 0.08905
ecosystem: npm
scores:
  vendor: 5.9
  ghsa: 7.5
ingestedAt: '2026-07-01T20:16:35.284Z'
---

## Overview

A flaw was found in sigstore. The `certificateOIDs` option, intended to restrict which certificates can sign artifacts, is accepted by the public application programming interface (API) but is not used during the verification process. This allows unauthorized certificates to be accepted, bypassing security policies that rely on specific certificate extension object identifiers (OIDs). As a result, applications that depend on this option for security receive no protection, potentially leading to the acceptance of malicious or untrusted artifacts.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Exploit Intelligence, Red Hat Connectivity Link 1, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux AI (RHEL AI) 3 · no fix planned: Red Hat Connectivity Link 1, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, … · updated 2026-09-10 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48815.json)

**sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option** — rated Moderate by Red Hat. Released 2026-07-01, updated 2026-09-10.

Affected:

- Exploit Intelligence
- Red Hat Connectivity Link 1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux AI (RHEL AI) 3

No fix planned:

- Red Hat Connectivity Link 1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Exploit Intelligence
- Red Hat Enterprise Linux AI (RHEL AI) 3

Not affected:

- Exploit Intelligence
- Red Hat Connectivity Link 1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat OpenShift Dev Spaces
- Red Hat Satellite 6
- Self-service automation portal 2

## Remediation

Will not fix

Workarounds / mitigations:

- Upgrade to sigstore 4.1.1 or later.

The majority of products have sigstore-js as a transitive dependency from the npm v10.9.7 package.
```
sh-5.1$ npm ls sigstore
npm@10.9.7 /usr/lib/node_modules/npm
+-- @npmcli/arborist@8.0.4
| `-- @npmcli/metavuln-calculator@8.0.1
|   `-- pacote@20.0.1
|     `-- sigstore@3.1.0 deduped
+-- libnpmpublish@10.0.2
| `-- sigstore@3.1.0
`-- pacote@19.0.2
  `-- sigstore@3.1.0 deduped
```

## Package advisory (CVE-2026-48815)

Affected packages:

- `sigstore <= 4.1.0`

Patched in:

- `sigstore 4.1.1`

Source: https://github.com/advisories/GHSA-52v5-jr5w-gjxr