CVE-2026-89135 describes a certificate validation bypass in wolfSSL library versions 5.8.4 through 5.9.2 under certain build conditions. When an X509_verify_cert call fails, it incorrectly plants an unverified attacker CA certificate into the shared CertManager. This flaw causes all type-blind sibling consumers of the CertManager to trust the attacker CA, effectively bypassing certificate validation mechanisms across native TLS, OCSP, CRL, and direct certificate manager verification. The vulnerability requires the presence of specific macros (OPENSSL_EXTRA && !NO_CERTS && !WOLFCRYPT_ONLY) or the build flag --enable-opensslextra and explicit use of the vulnerable function.

This vulnerability allows an attacker to bypass certificate validation by injecting an unverified CA into the shared CertManager. This compromises the trust model of TLS and related certificate validation processes, potentially enabling man-in-the-middle attacks or acceptance of fraudulent certificates. The CVSS 3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact on confidentiality and integrity but not availability.

No official patch or remediation information is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using the vulnerable wolfSSL versions with the specified build configurations and refrain from calling X509_verify_cert in affected builds.