---
id: "CVE-2026-122098"
page: "https://infrastack.ai/live/CVE-2026-122098"
kind: "vulnerability"
aliases: ["CVE-2026-122098"]
title: "CAI Content Credentials: improper certificate validation enables security bypass and write access"
severity: "medium"
cvss: 5.1
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "CAI Content Credentials", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["cai-content-credentials", "other"]
not_affected_if: []
published_at: "2026-11-10T22:18:28+00:00"
first_seen_at: "2026-11-10T22:27:28+00:00"
updated_at: "2026-11-10T22:30:58+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122098", "first_seen_at": "2026-11-10T22:27:28+00:00"}]
exploit_sources: []
---

# CAI Content Credentials: improper certificate validation enables security bypass and write access

Link for people: https://infrastack.ai/live/CVE-2026-122098 (this .md is for agents)

CAI Content Credentials does not properly validate certificates, which can let an attacker bypass security checks. A successful attacker could gain unauthorized write access, though exploitation depends on conditions outside the attacker's control.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:CAI Content Credentials affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T22:27:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122098

## From the sources

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_