EUVD-2026-36402
GHSA-33j8-j763-4fv5
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Network-reachable but high complexity; PR:L because exploiting the filter requires a signing credential; integrity impact only, no confidentiality or availability effect.
Primary rating from Vendor (CNA).
CVSS VectorVendor
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Lifecycle Timeline
4Description PRE-NVD
Articles & Coverage 1
AnalysisAI
Signature metadata trust bypass in Apache CXF's JwsJsonContainerRequestFilter allows an attacker who can send JWS JSON-signed requests to inject unvalidated metadata - such as Content-Type or protected HTTP headers - by placing it in the first signature entry of a multi-signature JWS JSON token, even when that entry's signature was never verified. Affected deployments using the cxf-rt-rs-security-jose-jaxrs module may incorrectly trust attacker-controlled content type or header values, steering JAX-RS entity parsing or signed-header consistency checks in unintended ways. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released patches 4.2.2 and 4.1.7 were published June 10, 2026.
Technical ContextAI
Apache CXF is a widely deployed open-source Java services framework supporting JAX-WS and JAX-RS endpoints. The affected component, cxf-rt-rs-security-jose-jaxrs, provides JWS (JSON Web Signature) JSON Serialization processing via the JwsJsonContainerRequestFilter JAX-RS filter. JWS JSON Serialization (RFC 7515 §7.2) permits a single payload to carry multiple independent signature objects in a 'signatures' array, each with its own 'protected' (signed) header and optional unprotected 'header'. The root cause of this vulnerability is analogous to CWE-347 (Improper Verification of Cryptographic Signature) or CWE-345 (Insufficient Verification of Data Authenticity): the filter reads protected metadata such as Content-Type or signed HTTP headers from the first signature entry in the array without first confirming that entry's signature was the one accepted by the verification logic. An attacker can therefore prepend a crafted first entry with malicious protected metadata while placing a legitimately verified signature in a subsequent entry, causing the filter to act on unauthenticated metadata.
RemediationAI
Upgrade to Apache CXF 4.2.2 (for 4.2.x users) or 4.1.7 (for 4.1.x users), both released June 10, 2026 and confirmed by the Apache CXF project at https://cxf.apache.org/. The upgraded artifacts are available via Maven Central under org.apache.cxf:cxf-rt-rs-security-jose-jaxrs. If an immediate upgrade is not feasible, a compensating control is to disable or remove JwsJsonContainerRequestFilter from the JAX-RS filter chain and replace JWS JSON Serialization with compact JWS serialization, which does not support multiple signature entries and is not affected; note this change requires clients to update their signing format. Alternatively, restrict access to affected endpoints to only fully trusted, internally-managed clients at the network layer, reducing the pool of principals who can present crafted multi-signature tokens. Both workarounds carry operational trade-offs and are not substitutes for patching.
More in Jwt Attack
View allWhy is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update
Authentication bypass in SimpleHelp 5.5.15 and prior (plus 6.0 pre-release builds) allows remote unauthenticated attacke
Authentication bypass in Fortinet FortiOS, FortiProxy, and FortiSwitchManager allows unauthenticated remote attackers to
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Rated critical severity (CVS
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Rated critical severity (CVS
The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. Rated criti
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.27
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work
The Ruby SAML library is for implementing the client side of a SAML authorization. Rated critical severity (CVSS 9.8), t
cosign is a container signing and verification utility. Rated critical severity (CVSS 9.8), this vulnerability is remote
Biscuit is an authentication and authorization token for microservices architectures. Rated critical severity (CVSS 9.8)
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today