Search: CVE-2026-84185

CVE-2026-84185 is a medium severity vulnerability in the jwcrypto library used by Red Hat Ansible Automation Platform 2. The flaw involves improper verification of cryptographic signatures in JSON Web Signatures (JWS) when multiple keys are used. Due to a coding error, the library may accept a signature from any valid key in the set rather than verifying the specific key ID (kid). This can allow an attacker with a valid key to bypass authorization checks that rely on the key ID to identify tenants or users.