CVE-2026-6091

Name of the Vulnerable Software and Affected Versions wolfSSL (affected versions not specified)

Description Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate instead of a trusted anchor. This allows an attacker to present a chain ending at an intermediate certificate they control and have it accepted as valid. This issue occurs in the OpenSSL compatibility certificate-path-building path using the wolfSSL X509 verify cert() function and X509 STORE when the X509 V FLAG PARTIAL CHAIN verify flag is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, avoid enabling the X509 V FLAG PARTIAL CHAIN verify flag.