CVE-2026-16460: Insufficient Verification of Data Authenticity in Red Hat Red Hat Enterprise Linux 10

This vulnerability arises because bootc and ostree do not revalidate the container image of already-staged deployments against the current container signature policy during finalization. If unsigned OS content was staged when the policy was permissive, it can remain bootable after the policy is hardened to reject unsigned images. This bypass can result in full host compromise when the system reboots, as unsigned and potentially malicious OS content can be executed.

An attacker can maintain or introduce unsigned OS content that remains bootable despite a hardened signature policy, potentially leading to full host compromise on reboot. This affects system integrity and confidentiality with high impact on confidentiality, integrity, and availability as indicated by the CVSS score of 7.4.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-16460 for current remediation guidance. Until a fix is applied, administrators should carefully review deployment policies and avoid relying on staged content that was approved under permissive signature policies.