The vulnerability in librest arises from the use of the GRand function from the GLib API for generating the PKCE code verifier in OAuth authorization. GRand is a cryptographically insecure PRNG, resulting in insufficient entropy in the code verifier. An attacker capable of intercepting the authorization code can reverse-engineer the PRNG seed to predict or reconstruct the code verifier string. This allows the attacker to bypass PKCE protections, impersonate the client, obtain valid access tokens, and perform unauthorized actions on behalf of the user. Red Hat has issued security advisories and updates for affected versions of librest in Red Hat Enterprise Linux 10 and related products. The vulnerability is rated with an important severity and a CVSS v3.1 base score of 6.8, reflecting high confidentiality and integrity impact but requiring user interaction and high attack complexity.

Successful exploitation allows an attacker who can intercept the OAuth authorization code to bypass PKCE protections by predicting the code verifier string. This enables the attacker to impersonate the client, obtain valid access tokens, access protected user data, and perform actions on behalf of the user. The vulnerability impacts confidentiality and integrity but does not affect availability. The attack requires network access to intercept the authorization code and involves high complexity and user interaction.

Red Hat has released security updates that fix this vulnerability by addressing the weak random number generation in the PKCE implementation. Users and administrators should apply the updated librest packages as soon as possible to remediate the issue. Red Hat has not identified any practical mitigations other than applying the update. Refer to the Red Hat advisory at https://access.redhat.com/articles/11258 for detailed update instructions.