X.509 Trust-Chain Bypass Vulnerability in wolfSSL Library
CVE-2026-11999

8.2HIGH

Key Information:

Vendor

Wolfssl

Status
Wolfssl
Vendor
CVE Published:
25 June 2026

What is CVE-2026-11999?

A vulnerability in the wolfSSL library allows for a trust-chain bypass due to improper verification handling in the OpenSSL compatibility certificate verifier. This issue manifests when the X509_verify_cert() function is called with untrusted intermediates and the library is configured with the --enable-opensslextra option. During verification, if the provided certificate chain exceeds the maximum path depth (defaulting to 100), the verification process may erroneously succeed without reaching a trusted anchor. This flaw permits the acceptance of certificates that could be controlled by an attacker, thereby exposing the application to security risks. Users of the wolfSSL library, especially those deploying manual verification methods, should consider updating their systems or implementing necessary mitigations.

Affected Version(s)

wolfSSL 5.7.4 <= 5.9.1

References

https://github.com/wolfSSL/wolfssl/pull/10674
patch
https://www.wolfssl.com/docs/security-vulnerabilities/

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Corban Villa, Sohee Kim and Austin Chu (UC Berkeley, Sky Lab)
.