CVE-2026-89136

Name	CVE-2026-89136
Description	When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited server_cert_type=RawPublicKey which allowed a malicious or misbehaving server to bypass authentication. RPK is off by default and only enabled in --enable-rpk OR --enable-all OR --enable-distro AKA HAVE_RPK builds.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1150338

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
wolfssl (PTS)	bookworm	5.5.4-2+deb12u2	fixed
	bookworm (security)	5.5.4-2+deb12u3	fixed
	trixie	5.7.2-0.1+deb13u2	vulnerable
	sid	5.9.2-1.2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
wolfssl	source	bookworm	(not affected)
wolfssl	source	(unstable)	5.9.2-1.1			1150338

Notes

[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <not-affected> (RPK not in 5.5.4)
https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)