Live › vulnerability › CVE-2026-118782
Versions of node-forge before 1.4.1 accept a PKCS#12 iteration count of zero or less, so the derived key ignores the password and salt. Crafted PKCS#12 or PKCS#8 encrypted key input can then bypass integrity checks or be decrypted with predictable keys.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 19:26 UTC. All times on this page are UTC.
Applications that use node-forge to parse PKCS#12 files or encrypted PKCS#8 private keys that come from outside the application are exposed. Apps that only generate keys, or that handle only PBES2/PBKDF2-encrypted content, are not affected by the predictable-key part. Teams that never feed untrusted PKCS#12 or encrypted key material into node-forge can skip it.
No product ranges from the sources yet.
npm ls node-forgenode-forge at versions below 1.4.1forge.pkcs12.pkcs12FromAsn1 or forge.pki.decryptPrivateKeyInfo on untrusted input1.4.1 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS#12 MAC or PKCS#12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key() then returned a constant key independent of the password and salt, allowing crafted PKCS#12 input processed by forge.pkcs12.pkcs12FromAsn1() to bypass password-based integrity checks. Predictable encryption keys and IVs also affected PKCS#12 PBE using pbeWithSHAAnd3-KeyTripleDES-CBC or pbewithSHAAnd40BitRC2-CBC, including shrouded key bags, encrypted SafeContents, and PKCS#8 ENCRYPTED PRIVATE KEY input processed independently by forge.pki.decryptPrivateKeyInfo(). PBES2/PBKDF2-encrypted content is unaffected. This issue is fixed in version 1.4.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-118782")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.