CVE-2026-11310

Name of the Vulnerable Software and Affected Versions wolfSSL (affected versions not specified)

Description An X.509 trust-chain bypass exists in the OpenSSL compatibility certificate verifier function wolfSSL X509 verify cert(). This issue occurs in builds configured with --enable-opensslextra (OPENSSL EXTRA) where applications validate certificates using X509 verify cert() with caller-supplied untrusted intermediate certificates. The function temporarily loads these untrusted intermediates into the certificate manager but fails to remove them before the trusted-store check, allowing an untrusted intermediate to anchor the path itself. Consequently, an attacker can present a certificate chain that does not reach a configured trust anchor and have it accepted. This affects certificate verification independent of TLS, such as S/MIME/CMS, code/firmware signing, and JWT/JWS x5c, regardless of the key type or algorithm used. Native wolfSSL TLS/DTLS usage and the default TLS handshake (WOLFSSL VERIFY PEER) are not impacted; only TLS applications performing manual or deferred peer verification that also require --enable-sessioncerts are affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict the use of the wolfSSL X509 verify cert() function when processing caller-supplied untrusted intermediate certificates in builds using --enable-opensslextra.