This advisory covers a medium severity vulnerability (CVE-2026-41889) in the cosign RPMs included in Red Hat Hardened Images. The update includes cosign version 3.1.1-0.1.hum1 for aarch64 and x86_64 architectures and the corresponding source RPM. The vulnerability is categorized under CWE-89, which generally relates to injection flaws such as SQL injection, but no specific exploitation details are provided. The advisory references a bug fix and enhancement update without elaborating on the nature of the vulnerability or its impact. No CVSS score is assigned, and no known exploits have been reported.

The vulnerability affects Red Hat Hardened Images RPMs, specifically the cosign package. The severity is rated medium. The advisory does not provide explicit impact details or exploitation scenarios. No known exploits are reported in the wild, indicating limited or no active exploitation at this time.

A fix is available via the updated cosign RPMs version 3.1.1-0.1.hum1 for aarch64 and x86_64 architectures as provided by Red Hat Hardened Images. Users should apply this update according to Red Hat's guidance available at https://images.redhat.com/. No additional mitigation steps are specified or required beyond applying the official update.