CVE-2026-89316: LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion

Published Oct 23, 2026

Updated

LoadPublicKey resolved an EC key's curve with an unchecked type assertion, algToOptsMap[alg].(ECDSAOptions). A JWK declaring "kty":"EC" together with a non-EC "alg" — which RFC 7517 §4.4 permits — reaches that assertion and panics.

Event History

Oct 23, 2026

CVE Published

via MITRE·08:48 AM

Data Sourced

via MITRE·08:48 AM

DescriptionWeakness

Frequently Asked Questions

What input is required to trigger the failure?

An attacker needs to supply a JWK that declares "kty":"EC" while specifying a non-EC "alg". This combination is permitted by RFC 7517 §4.4 and causes LoadPublicKey to panic when it performs an unchecked ECDSAOptions type assertion.

What is the practical impact of exploitation?

The described outcome is a panic in LoadPublicKey. Systems that process attacker-controlled JWKs through this function may experience a denial of service.

CVE-2026-89316: LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion

Event History

Frequently Asked Questions

What input is required to trigger the failure?

What is the practical impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

What input is required to trigger the failure?

What is the practical impact of exploitation?