This vulnerability (CVE-2025-12816) affects the node-forge cryptographic library used in Red Hat Advanced Cluster Security for Kubernetes. It arises from an interpretation conflict in ASN.1 structure validation, allowing attackers to craft malicious ASN.1 data that bypasses downstream cryptographic verification and security decisions. The flaw results in semantic divergence due to desynchronized schema validations. Red Hat has addressed this issue in RHACS version 4.9.3, which includes security patches and bug fixes. The vulnerability is rated with a CVSS v3 base score of 8.7 by Red Hat, indicating high severity. No known exploits in the wild have been reported. Mitigation involves upgrading to the fixed version.

An unauthenticated attacker can exploit this vulnerability to bypass cryptographic verification mechanisms in affected Red Hat products that use node-forge, potentially compromising integrity and confidentiality of security decisions. This could lead to unauthorized actions or acceptance of malicious data. The vulnerability does not impact availability. Red Hat rates this vulnerability as important/high severity with a CVSS score of 8.7, reflecting significant risk to affected systems if exploited.

Red Hat has released version 4.9.3 of Red Hat Advanced Cluster Security for Kubernetes which includes fixes for this vulnerability. Users of earlier versions (>=4.9.0 <4.9.3) are strongly advised to upgrade to version 4.9.3 to apply the security patches and bug fixes. No alternative mitigations meeting Red Hat's criteria are currently available. Applying the official update is the recommended remediation.