CVE-2026-13089

{
  "id": "CVE-2026-13089",
  "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
  "published": "2026-07-22T21:17:12.743",
  "lastModified": "2026-10-24T13:10:00.147",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify.\n\nWhen the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self->alg($self->header->{alg}) from the token's own header and then calls decode_jwt(token, key, 1, [$self->alg]), handing JSON::WebToken an accepted-algorithm allowlist taken from the untrusted token. A token with alg=none yields ['none'], so decode_jwt returns the claims with no signature check, and a token with alg=HS256 is verified with the RP's RSA public key as the HMAC secret (RS to HS confusion).\n\nThe ID Token is the OpenID Connect authentication assertion delivered to the Relying Party. Any caller that verifies an ID Token through the unpinned load(token)->verify path, or load(token, key) with only the key pinned, accepts a forged token carrying attacker-chosen claims such as sub and is authenticated as any user. Passing an explicit algorithm so $self->alg is already set bypasses the header-derived allowlist and is not affected.\n\nNote that the latest version uploaded to CPAN is 0.10. Later versions are available in the git repository."
    },
    {
      "lang": "es",
      "value": "Las versiones de OIDC::Lite hasta la 0.12.1 para Perl permiten eludir la verificación de la firma del ID Token mediante una lista blanca de algoritmos controlada por el token en verify.\n\nCuando el llamador no fija un algoritmo, OIDC::Lite::Model::IDToken::verify establece $self  ->  alg($self  ->  header  ->  {alg}) desde la propia cabecera del token y luego llama a decode_jwt(token, key, 1, [$self  ->  alg]), entregando a JSON::WebToken una lista blanca de algoritmos aceptados tomada del token no confiable. Un token con alg=none produce [’none’], por lo que decode_jwt devuelve las ’claims’ sin verificación de firma, y un token con alg=HS256 se verifica con la clave pública RSA del RP como secreto HMAC (confusión de RS a HS).\n\nEl ID Token es la aserción de autenticación de OpenID Connect entregada a la parte confiable. Cualquier llamador que verifique un ID Token a través de la ruta no fijada load(token)  ->  verify, o load(token, key) con solo la clave fijada, acepta un token falsificado que contiene ’claims’ elegidas por el atacante, como ’sub’, y es autenticado como cualquier usuario. Pasar un algoritmo explícito de modo que $self  ->  alg ya esté establecido elude la lista blanca derivada de la cabecera y no se ve afectado.\n\nTenga en cuenta que la última versión subida a CPAN es la 0.10. Las versiones posteriores están disponibles en el repositorio git."
    }
  ],
  "affected": [
    {
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "affectedData": [
        {
          "vendor": "RITOU",
          "product": "OIDC::Lite",
          "defaultStatus": "unaffected",
          "collectionURL": "https://cpan.org/modules",
          "packageName": "OIDC-Lite",
          "programFiles": [
            "lib/OIDC/Lite/Model/IDToken.pm"
          ],
          "programRoutines": [
            {
              "name": "OIDC::Lite::Model::IDToken::verify"
            }
          ],
          "repo": "https://github.com/ritou/p5-oidc-lite",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "0.12.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-27T17:32:56.996183Z",
          "id": "CVE-2026-13089",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-347"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://datatracker.ietf.org/doc/html/rfc8725#section-3.1",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "https://github.com/ritou/p5-oidc-lite/pull/31",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "https://security.metacpan.org/patches/O/OIDC-Lite/0.10/CVE-2026-13089-r1.patch",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2026/07/22/17",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}