The vulnerability in pyca cryptography (CVE-2026-26007) arises from missing validation that elliptic curve public key points belong to the prime-order subgroup of the curve. Functions such as public_key_from_numbers, EllipticCurvePublicNumbers.public_key(), load_der_public_key(), and load_pem_public_key() prior to version 46.0.5 do not perform this check. This allows an attacker to provide a public key point from a small-order subgroup, which can leak information about the victim's private key during ECDH shared secret computation or enable forgery of ECDSA signatures on the small subgroup. The issue specifically affects SECT curves with cofactor greater than 1. Red Hat's advisory notes the difficulty of exploitation but confirms potential loss of integrity in encrypted channels. While a fix exists in version 46.0.5, Red Hat currently does not provide a mitigation that meets their criteria for ease of use and deployment.

Exploitation of this vulnerability can lead to leakage of private key bits during ECDH key exchange and allow forgery of ECDSA signatures on small subgroups, resulting in loss of integrity of encrypted communication channels. The vulnerability affects cryptographic operations relying on elliptic curve cryptography with SECT curves and cofactor > 1. Although exploitation is considered difficult, the impact is high due to potential compromise of cryptographic key material and signature integrity.

A fix is available in cryptography package version 46.0.5 and later, which includes proper subgroup validation. Users should upgrade to version 46.0.5 or newer to remediate this vulnerability. Red Hat currently states that no alternative mitigation meeting their criteria is available. Therefore, applying the official patch is the recommended course of action.