CVE-2026-103503

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-103503", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "state": "PUBLISHED", "assignerShortName": "EEF", "dateReserved": "2026-10-08T15:45:02.372Z", "datePublished": "2026-10-12T15:17:45.545Z", "dateUpdated": "2026-11-11T14:04:54.738Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:hexpm:hex:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Hex.HTTP.SSL'"], "packageName": "hex", "packageURL": "pkg:otp/hex?repository_url=https:%2F%2Fgithub.com%2Fhexpm%2Fhex&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Fhexpm%2Fhex.git", "product": "hex", "programFiles": ["lib/hex/http/ssl.ex"], "programRoutines": [{"name": "'Elixir.Hex.HTTP.SSL':ssl_opts/1"}, {"name": "'Elixir.Hex.HTTP.SSL':partial_chain/2"}], "repo": "https://github.com/hexpm/hex", "vendor": "hexpm", "versions": [{"lessThan": "2.5.2", "status": "affected", "version": "0.20.2", "versionType": "semver"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:hexpm:hex:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Hex.HTTP.SSL'"], "packageName": "hexpm/hex", "packageURL": "pkg:github/hexpm/hex", "product": "hex", "programFiles": ["lib/hex/http/ssl.ex"], "programRoutines": [{"name": "'Elixir.Hex.HTTP.SSL':ssl_opts/1"}, {"name": "'Elixir.Hex.HTTP.SSL':partial_chain/2"}], "repo": "https://github.com/hexpm/hex", "vendor": "hexpm", "versions": [{"changes": [{"at": "5f5a2136c7cf5991b6e8a30d645ca9f8e74b0785", "status": "unaffected"}, {"at": "6232a6498015e559743bec4f4fbec9138837cec8", "status": "unaffected"}], "lessThan": "*", "status": "affected", "version": "c9b26a46928bfcd546773571e09c1d05f4cd9fb7", "versionType": "git"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Affects users who set <code>cacerts_path</code> or <code>HEX_CACERTS_PATH</code> to a CA store that leaves out some of the CAs bundled with Hex. Users who don't set it trust the bundled store already and aren't affected.</p>"}, {"base64": false, "type": "text/markdown", "value": "Affects users who set `cacerts_path` or `HEX_CACERTS_PATH` to a CA store that leaves out some of the CAs bundled with Hex. Users who don't set it trust the bundled store already and aren't affected."}], "value": "Affects users who set cacerts_path or HEX_CACERTS_PATH to a CA store that leaves out some of the CAs bundled with Hex. Users who don't set it trust the bundled store already and aren't affected."}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hexpm:hex:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.5.2", "versionStartIncluding": "0.20.2", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "credits": [{"lang": "en", "type": "finder", "value": "Peter Ullrich"}, {"lang": "en", "type": "remediation developer", "value": "Eric Meadows-J\u00f6nsson"}, {"lang": "en", "type": "analyst", "value": "Jonatan M\u00e4nnchen / EEF"}], "dateAssigned": "2026-10-10T12:59:48.000Z", "datePublic": "2026-10-12T15:17:45.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set <code>cacerts_path</code> to a CA store that leaves that CA out.</p>\n<p><code>cacerts_path</code> (<code>HEX_CACERTS_PATH</code>) is documented as the path to the CA certificate store, used instead of the CA bundle that ships with Hex. <code>Hex.HTTP.SSL.ssl_opts/1</code> passes the configured store as the <code>cacerts</code> option, but builds the <code>partial_chain</code> callback from the bundled store whether <code>cacerts_path</code> is set or not. <code>Hex.HTTP.SSL.partial_chain/2</code> accepts a server chain when any certificate in it has the same public key as a bundled CA certificate, so a chain that leads to a bundled CA passes verification although the configured store doesn't contain that CA. Hostname verification still applies.</p>\n<p>This issue affects hex: from 0.20.2 before 2.5.2.</p>"}, {"base64": false, "type": "text/markdown", "value": "Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set `cacerts_path` to a CA store that leaves that CA out.\n\n`cacerts_path` (`HEX_CACERTS_PATH`) is documented as the path to the CA certificate store, used instead of the CA bundle that ships with Hex. `Hex.HTTP.SSL.ssl_opts/1` passes the configured store as the `cacerts` option, but builds the `partial_chain` callback from the bundled store whether `cacerts_path` is set or not. `Hex.HTTP.SSL.partial_chain/2` accepts a server chain when any certificate in it has the same public key as a bundled CA certificate, so a chain that leads to a bundled CA passes verification although the configured store doesn't contain that CA. Hostname verification still applies.\n\nThis issue affects hex: from 0.20.2 before 2.5.2."}], "value": "Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacerts_path to a CA store that leaves that CA out.\n\ncacerts_path (HEX_CACERTS_PATH) is documented as the path to the CA certificate store, used instead of the CA bundle that ships with Hex. Hex.HTTP.SSL.ssl_opts/1 passes the configured store as the cacerts option, but builds the partial_chain callback from the bundled store whether cacerts_path is set or not. Hex.HTTP.SSL.partial_chain/2 accepts a server chain when any certificate in it has the same public key as a bundled CA certificate, so a chain that leads to a bundled CA passes verification although the configured store doesn't contain that CA. Hostname verification still applies.\n\nThis issue affects hex: from 0.20.2 before 2.5.2."}], "impacts": [{"capecId": "CAPEC-94", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Users set <code>cacerts_path</code> to limit which CAs can authenticate Hex's servers, for example to their organization's internal CA. Every CA in Hex's bundled store can still authenticate those servers, so a certificate mis-issued by one of those CAs, or obtained through compromised domain validation, lets an attacker on the network path impersonate hex.pm, repo.hex.pm, a self-hosted repository or a mirror. The attacker receives the API keys, OAuth tokens and repository keys Hex sends, and can alter API responses. Registry signatures and package checksums still prevent changes to registry contents and packages.</p>"}, {"base64": false, "type": "text/markdown", "value": "Users set `cacerts_path` to limit which CAs can authenticate Hex's servers, for example to their organization's internal CA. Every CA in Hex's bundled store can still authenticate those servers, so a certificate mis-issued by one of those CAs, or obtained through compromised domain validation, lets an attacker on the network path impersonate hex.pm, repo.hex.pm, a self-hosted repository or a mirror. The attacker receives the API keys, OAuth tokens and repository keys Hex sends, and can alter API responses. Registry signatures and package checksums still prevent changes to registry contents and packages."}], "value": "Users set cacerts_path to limit which CAs can authenticate Hex's servers, for example to their organization's internal CA. Every CA in Hex's bundled store can still authenticate those servers, so a certificate mis-issued by one of those CAs, or obtained through compromised domain validation, lets an attacker on the network path impersonate hex.pm, repo.hex.pm, a self-hosted repository or a mirror. The attacker receives the API keys, OAuth tokens and repository keys Hex sends, and can alter API responses. Registry signatures and package checksums still prevent changes to registry contents and packages."}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "baseScore": 5.9, "baseSeverity": "MEDIUM", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-11-11T14:04:54.738Z"}, "references": [{"name": "GitHub Advisory", "tags": ["related", "vendor-advisory"], "url": "https://github.com/hexpm/hex/security/advisories/GHSA-rw8q-hg7m-cxgr"}, {"name": "EEF CNA record for CVE-2026-103503", "tags": ["related"], "url": "https://cna.erlef.org/cves/CVE-2026-103503.html"}, {"name": "OSV record EEF-CVE-2026-103503", "tags": ["related"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-103503"}, {"name": "Introducing commit c9b26a4 in hexpm/hex", "tags": ["related"], "url": "https://github.com/hexpm/hex/commit/c9b26a46928bfcd546773571e09c1d05f4cd9fb7"}, {"name": "Fix commit 5f5a213 in hexpm/hex", "tags": ["patch"], "url": "https://github.com/hexpm/hex/commit/5f5a2136c7cf5991b6e8a30d645ca9f8e74b0785"}, {"name": "Fix commit 6232a64 in hexpm/hex", "tags": ["patch"], "url": "https://github.com/hexpm/hex/commit/6232a6498015e559743bec4f4fbec9138837cec8"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Upgrade Hex to 2.5.2 or later, for example with <code>mix local.hex</code>. With <code>cacerts_path</code> (<code>HEX_CACERTS_PATH</code>) set, Hex then only accepts server certificates that chain to a CA in that file, and it doesn't trust copies of CA certificates sent by the server.</p>"}, {"base64": false, "type": "text/markdown", "value": "Upgrade Hex to 2.5.2 or later, for example with `mix local.hex`. With `cacerts_path` (`HEX_CACERTS_PATH`) set, Hex then only accepts server certificates that chain to a CA in that file, and it doesn't trust copies of CA certificates sent by the server."}], "value": "Upgrade Hex to 2.5.2 or later, for example with mix local.hex. With cacerts_path (HEX_CACERTS_PATH) set, Hex then only accepts server certificates that chain to a CA in that file, and it doesn't trust copies of CA certificates sent by the server."}], "source": {"discovery": "UNKNOWN"}, "title": "Hex trusts its bundled CA certificates when cacerts_path is set", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>There's no Hex configuration that stops the bundled CAs from being trusted.</p>"}, {"base64": false, "type": "text/markdown", "value": "There's no Hex configuration that stops the bundled CAs from being trusted."}], "value": "There's no Hex configuration that stops the bundled CAs from being trusted."}], "x_proofOfConcept": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<ol>\n<li>Create a PEM file that contains only an unrelated test CA certificate and set <code>cacerts_path</code> to it.</li>\n<li>Open a TLS connection to hex.pm with the options from <code>Hex.HTTP.SSL.ssl_opts(\"https://hex.pm\")</code>. The handshake succeeds, and the accepted chain leads to ISRG Root X2 cross-signed by ISRG Root X1, neither of which is in the PEM file.</li>\n<li>Remove the <code>partial_chain</code> option and connect again. The handshake fails with <code>unknown_ca</code>.</li>\n</ol>"}, {"base64": false, "type": "text/markdown", "value": "1. Create a PEM file that contains only an unrelated test CA certificate and set `cacerts_path` to it.\n2. Open a TLS connection to hex.pm with the options from `Hex.HTTP.SSL.ssl_opts(\"https://hex.pm\")`. The handshake succeeds, and the accepted chain leads to ISRG Root X2 cross-signed by ISRG Root X1, neither of which is in the PEM file.\n3. Remove the `partial_chain` option and connect again. The handshake fails with `unknown_ca`."}], "value": "* Create a PEM file that contains only an unrelated test CA certificate and set cacerts_path to it.\n* Open a TLS connection to hex.pm with the options from Hex.HTTP.SSL.ssl_opts(\"https://hex.pm\"). The handshake succeeds, and the accepted chain leads to ISRG Root X2 cross-signed by ISRG Root X1, neither of which is in the PEM file.\n* Remove the partial_chain option and connect again. The handshake fails with unknown_ca."}], "x_technicalAnalysis": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<ol>\n<li><code>Hex.HTTP.SSL.get_ca_certs/0</code> returns the certificates from <code>cacerts_path</code> when it's set, and <code>ssl_opts/1</code> passes them as <code>cacerts</code>.</li>\n<li><code>ssl_opts/1</code> sets <code>partial_chain</code> to <code>&amp;partial_chain(Certs.cacerts(), &amp;1)</code>, which always uses the bundled store.</li>\n<li>When the server's chain doesn't lead to a certificate in <code>cacerts</code>, OTP calls <code>partial_chain</code> with the chain. <code>partial_chain/2</code> returns <code>{:trusted_ca, der}</code> for the first certificate whose public key matches a bundled CA certificate, and OTP validates the chain with that certificate as the trust anchor.</li>\n<li>Chain validation and the hostname check from <code>customize_hostname_check/1</code> still run, so the attacker needs a certificate for the requested host that chains to a bundled CA.</li>\n</ol>"}, {"base64": false, "type": "text/markdown", "value": "1. `Hex.HTTP.SSL.get_ca_certs/0` returns the certificates from `cacerts_path` when it's set, and `ssl_opts/1` passes them as `cacerts`.\n2. `ssl_opts/1` sets `partial_chain` to `&partial_chain(Certs.cacerts(), &1)`, which always uses the bundled store.\n3. When the server's chain doesn't lead to a certificate in `cacerts`, OTP calls `partial_chain` with the chain. `partial_chain/2` returns `{:trusted_ca, der}` for the first certificate whose public key matches a bundled CA certificate, and OTP validates the chain with that certificate as the trust anchor.\n4. Chain validation and the hostname check from `customize_hostname_check/1` still run, so the attacker needs a certificate for the requested host that chains to a bundled CA."}], "value": "* Hex.HTTP.SSL.get_ca_certs/0 returns the certificates from cacerts_path when it's set, and ssl_opts/1 passes them as cacerts.\n* ssl_opts/1 sets partial_chain to &partial_chain(Certs.cacerts(), &1), which always uses the bundled store.\n* When the server's chain doesn't lead to a certificate in cacerts, OTP calls partial_chain with the chain. partial_chain/2 returns {:trusted_ca, der} for the first certificate whose public key matches a bundled CA certificate, and OTP validates the chain with that certificate as the trust anchor.\n* Chain validation and the hostname check from customize_hostname_check/1 still run, so the attacker needs a certificate for the requested host that chains to a bundled CA."}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-16T17:30:53.768172Z", "id": "CVE-2026-103503", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T17:32:45.735Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-103503", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-16T17:30:53.768172Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T17:32:34.878Z"}}], "cna": {"title": "Hex trusts its bundled CA certificates when cacerts_path is set", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Peter Ullrich"}, {"lang": "en", "type": "remediation developer", "value": "Eric Meadows-J\u00f6nsson"}, {"lang": "en", "type": "analyst", "value": "Jonatan M\u00e4nnchen / EEF"}], "impacts": [{"capecId": "CAPEC-94", "descriptions": [{"lang": "en", "value": "Users set cacerts_path to limit which CAs can authenticate Hex's servers, for example to their organization's internal CA. Every CA in Hex's bundled store can still authenticate those servers, so a certificate mis-issued by one of those CAs, or obtained through compromised domain validation, lets an attacker on the network path impersonate hex.pm, repo.hex.pm, a self-hosted repository or a mirror. The attacker receives the API keys, OAuth tokens and repository keys Hex sends, and can alter API responses. Registry signatures and package checksums still prevent changes to registry contents and packages.", "supportingMedia": [{"type": "text/html", "value": "<p>Users set <code>cacerts_path</code> to limit which CAs can authenticate Hex's servers, for example to their organization's internal CA. Every CA in Hex's bundled store can still authenticate those servers, so a certificate mis-issued by one of those CAs, or obtained through compromised domain validation, lets an attacker on the network path impersonate hex.pm, repo.hex.pm, a self-hosted repository or a mirror. The attacker receives the API keys, OAuth tokens and repository keys Hex sends, and can alter API responses. Registry signatures and package checksums still prevent changes to registry contents and packages.</p>", "base64": false}, {"type": "text/markdown", "value": "Users set `cacerts_path` to limit which CAs can authenticate Hex's servers, for example to their organization's internal CA. Every CA in Hex's bundled store can still authenticate those servers, so a certificate mis-issued by one of those CAs, or obtained through compromised domain validation, lets an attacker on the network path impersonate hex.pm, repo.hex.pm, a self-hosted repository or a mirror. The attacker receives the API keys, OAuth tokens and repository keys Hex sends, and can alter API responses. Registry signatures and package checksums still prevent changes to registry contents and packages.", "base64": false}]}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:hexpm:hex:*:*:*:*:*:*:*:*"], "repo": "https://github.com/hexpm/hex", "vendor": "hexpm", "modules": ["'Elixir.Hex.HTTP.SSL'"], "product": "hex", "versions": [{"status": "affected", "version": "0.20.2", "lessThan": "2.5.2", "versionType": "semver"}], "packageURL": "pkg:otp/hex?repository_url=https:%2F%2Fgithub.com%2Fhexpm%2Fhex&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Fhexpm%2Fhex.git", "packageName": "hex", "programFiles": ["lib/hex/http/ssl.ex"], "defaultStatus": "unaffected", "programRoutines": [{"name": "'Elixir.Hex.HTTP.SSL':ssl_opts/1"}, {"name": "'Elixir.Hex.HTTP.SSL':partial_chain/2"}]}, {"cpes": ["cpe:2.3:a:hexpm:hex:*:*:*:*:*:*:*:*"], "repo": "https://github.com/hexpm/hex", "vendor": "hexpm", "modules": ["'Elixir.Hex.HTTP.SSL'"], "product": "hex", "versions": [{"status": "affected", "changes": [{"at": "5f5a2136c7cf5991b6e8a30d645ca9f8e74b0785", "status": "unaffected"}, {"at": "6232a6498015e559743bec4f4fbec9138837cec8", "status": "unaffected"}], "version": "c9b26a46928bfcd546773571e09c1d05f4cd9fb7", "lessThan": "*", "versionType": "git"}], "packageURL": "pkg:github/hexpm/hex", "packageName": "hexpm/hex", "programFiles": ["lib/hex/http/ssl.ex"], "collectionURL": "https://github.com", "defaultStatus": "unaffected", "programRoutines": [{"name": "'Elixir.Hex.HTTP.SSL':ssl_opts/1"}, {"name": "'Elixir.Hex.HTTP.SSL':partial_chain/2"}]}], "solutions": [{"lang": "en", "value": "Upgrade Hex to 2.5.2 or later, for example with mix local.hex. With cacerts_path (HEX_CACERTS_PATH) set, Hex then only accepts server certificates that chain to a CA in that file, and it doesn't trust copies of CA certificates sent by the server.", "supportingMedia": [{"type": "text/html", "value": "<p>Upgrade Hex to 2.5.2 or later, for example with <code>mix local.hex</code>. With <code>cacerts_path</code> (<code>HEX_CACERTS_PATH</code>) set, Hex then only accepts server certificates that chain to a CA in that file, and it doesn't trust copies of CA certificates sent by the server.</p>", "base64": false}, {"type": "text/markdown", "value": "Upgrade Hex to 2.5.2 or later, for example with `mix local.hex`. With `cacerts_path` (`HEX_CACERTS_PATH`) set, Hex then only accepts server certificates that chain to a CA in that file, and it doesn't trust copies of CA certificates sent by the server.", "base64": false}]}], "datePublic": "2026-10-12T15:17:45.000Z", "references": [{"url": "https://github.com/hexpm/hex/security/advisories/GHSA-rw8q-hg7m-cxgr", "name": "GitHub Advisory", "tags": ["related", "vendor-advisory"]}, {"url": "https://cna.erlef.org/cves/CVE-2026-103503.html", "name": "EEF CNA record for CVE-2026-103503", "tags": ["related"]}, {"url": "https://osv.dev/vulnerability/EEF-CVE-2026-103503", "name": "OSV record EEF-CVE-2026-103503", "tags": ["related"]}, {"url": "https://github.com/hexpm/hex/commit/c9b26a46928bfcd546773571e09c1d05f4cd9fb7", "name": "Introducing commit c9b26a4 in hexpm/hex", "tags": ["related"]}, {"url": "https://github.com/hexpm/hex/commit/5f5a2136c7cf5991b6e8a30d645ca9f8e74b0785", "name": "Fix commit 5f5a213 in hexpm/hex", "tags": ["patch"]}, {"url": "https://github.com/hexpm/hex/commit/6232a6498015e559743bec4f4fbec9138837cec8", "name": "Fix commit 6232a64 in hexpm/hex", "tags": ["patch"]}], "workarounds": [{"lang": "en", "value": "There's no Hex configuration that stops the bundled CAs from being trusted.", "supportingMedia": [{"type": "text/html", "value": "<p>There's no Hex configuration that stops the bundled CAs from being trusted.</p>", "base64": false}, {"type": "text/markdown", "value": "There's no Hex configuration that stops the bundled CAs from being trusted.", "base64": false}]}], "dateAssigned": "2026-10-10T12:59:48.000Z", "descriptions": [{"lang": "en", "value": "Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacerts_path to a CA store that leaves that CA out.\n\ncacerts_path (HEX_CACERTS_PATH) is documented as the path to the CA certificate store, used instead of the CA bundle that ships with Hex. Hex.HTTP.SSL.ssl_opts/1 passes the configured store as the cacerts option, but builds the partial_chain callback from the bundled store whether cacerts_path is set or not. Hex.HTTP.SSL.partial_chain/2 accepts a server chain when any certificate in it has the same public key as a bundled CA certificate, so a chain that leads to a bundled CA passes verification although the configured store doesn't contain that CA. Hostname verification still applies.\n\nThis issue affects hex: from 0.20.2 before 2.5.2.", "supportingMedia": [{"type": "text/html", "value": "<p>Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set <code>cacerts_path</code> to a CA store that leaves that CA out.</p>\n<p><code>cacerts_path</code> (<code>HEX_CACERTS_PATH</code>) is documented as the path to the CA certificate store, used instead of the CA bundle that ships with Hex. <code>Hex.HTTP.SSL.ssl_opts/1</code> passes the configured store as the <code>cacerts</code> option, but builds the <code>partial_chain</code> callback from the bundled store whether <code>cacerts_path</code> is set or not. <code>Hex.HTTP.SSL.partial_chain/2</code> accepts a server chain when any certificate in it has the same public key as a bundled CA certificate, so a chain that leads to a bundled CA passes verification although the configured store doesn't contain that CA. Hostname verification still applies.</p>\n<p>This issue affects hex: from 0.20.2 before 2.5.2.</p>", "base64": false}, {"type": "text/markdown", "value": "Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set `cacerts_path` to a CA store that leaves that CA out.\n\n`cacerts_path` (`HEX_CACERTS_PATH`) is documented as the path to the CA certificate store, used instead of the CA bundle that ships with Hex. `Hex.HTTP.SSL.ssl_opts/1` passes the configured store as the `cacerts` option, but builds the `partial_chain` callback from the bundled store whether `cacerts_path` is set or not. `Hex.HTTP.SSL.partial_chain/2` accepts a server chain when any certificate in it has the same public key as a bundled CA certificate, so a chain that leads to a bundled CA passes verification although the configured store doesn't contain that CA. Hostname verification still applies.\n\nThis issue affects hex: from 0.20.2 before 2.5.2.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation"}]}], "configurations": [{"lang": "en", "value": "Affects users who set cacerts_path or HEX_CACERTS_PATH to a CA store that leaves out some of the CAs bundled with Hex. Users who don't set it trust the bundled store already and aren't affected.", "supportingMedia": [{"type": "text/html", "value": "<p>Affects users who set <code>cacerts_path</code> or <code>HEX_CACERTS_PATH</code> to a CA store that leaves out some of the CAs bundled with Hex. Users who don't set it trust the bundled store already and aren't affected.</p>", "base64": false}, {"type": "text/markdown", "value": "Affects users who set `cacerts_path` or `HEX_CACERTS_PATH` to a CA store that leaves out some of the CAs bundled with Hex. Users who don't set it trust the bundled store already and aren't affected.", "base64": false}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hexpm:hex:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2.5.2", "versionStartIncluding": "0.20.2"}], "operator": "OR"}], "operator": "AND"}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-11-11T14:04:54.738Z"}, "x_proofOfConcept": [{"lang": "en", "value": "* Create a PEM file that contains only an unrelated test CA certificate and set cacerts_path to it.\n* Open a TLS connection to hex.pm with the options from Hex.HTTP.SSL.ssl_opts(\"https://hex.pm\"). The handshake succeeds, and the accepted chain leads to ISRG Root X2 cross-signed by ISRG Root X1, neither of which is in the PEM file.\n* Remove the partial_chain option and connect again. The handshake fails with unknown_ca.", "supportingMedia": [{"type": "text/html", "value": "<ol>\n<li>Create a PEM file that contains only an unrelated test CA certificate and set <code>cacerts_path</code> to it.</li>\n<li>Open a TLS connection to hex.pm with the options from <code>Hex.HTTP.SSL.ssl_opts(\"https://hex.pm\")</code>. The handshake succeeds, and the accepted chain leads to ISRG Root X2 cross-signed by ISRG Root X1, neither of which is in the PEM file.</li>\n<li>Remove the <code>partial_chain</code> option and connect again. The handshake fails with <code>unknown_ca</code>.</li>\n</ol>", "base64": false}, {"type": "text/markdown", "value": "1. Create a PEM file that contains only an unrelated test CA certificate and set `cacerts_path` to it.\n2. Open a TLS connection to hex.pm with the options from `Hex.HTTP.SSL.ssl_opts(\"https://hex.pm\")`. The handshake succeeds, and the accepted chain leads to ISRG Root X2 cross-signed by ISRG Root X1, neither of which is in the PEM file.\n3. Remove the `partial_chain` option and connect again. The handshake fails with `unknown_ca`.", "base64": false}]}], "x_technicalAnalysis": [{"lang": "en", "value": "* Hex.HTTP.SSL.get_ca_certs/0 returns the certificates from cacerts_path when it's set, and ssl_opts/1 passes them as cacerts.\n* ssl_opts/1 sets partial_chain to &partial_chain(Certs.cacerts(), &1), which always uses the bundled store.\n* When the server's chain doesn't lead to a certificate in cacerts, OTP calls partial_chain with the chain. partial_chain/2 returns {:trusted_ca, der} for the first certificate whose public key matches a bundled CA certificate, and OTP validates the chain with that certificate as the trust anchor.\n* Chain validation and the hostname check from customize_hostname_check/1 still run, so the attacker needs a certificate for the requested host that chains to a bundled CA.", "supportingMedia": [{"type": "text/html", "value": "<ol>\n<li><code>Hex.HTTP.SSL.get_ca_certs/0</code> returns the certificates from <code>cacerts_path</code> when it's set, and <code>ssl_opts/1</code> passes them as <code>cacerts</code>.</li>\n<li><code>ssl_opts/1</code> sets <code>partial_chain</code> to <code>&amp;partial_chain(Certs.cacerts(), &amp;1)</code>, which always uses the bundled store.</li>\n<li>When the server's chain doesn't lead to a certificate in <code>cacerts</code>, OTP calls <code>partial_chain</code> with the chain. <code>partial_chain/2</code> returns <code>{:trusted_ca, der}</code> for the first certificate whose public key matches a bundled CA certificate, and OTP validates the chain with that certificate as the trust anchor.</li>\n<li>Chain validation and the hostname check from <code>customize_hostname_check/1</code> still run, so the attacker needs a certificate for the requested host that chains to a bundled CA.</li>\n</ol>", "base64": false}, {"type": "text/markdown", "value": "1. `Hex.HTTP.SSL.get_ca_certs/0` returns the certificates from `cacerts_path` when it's set, and `ssl_opts/1` passes them as `cacerts`.\n2. `ssl_opts/1` sets `partial_chain` to `&partial_chain(Certs.cacerts(), &1)`, which always uses the bundled store.\n3. When the server's chain doesn't lead to a certificate in `cacerts`, OTP calls `partial_chain` with the chain. `partial_chain/2` returns `{:trusted_ca, der}` for the first certificate whose public key matches a bundled CA certificate, and OTP validates the chain with that certificate as the trust anchor.\n4. Chain validation and the hostname check from `customize_hostname_check/1` still run, so the attacker needs a certificate for the requested host that chains to a bundled CA.", "base64": false}]}]}}, "cveMetadata": {"cveId": "CVE-2026-103503", "state": "PUBLISHED", "dateUpdated": "2026-11-11T14:04:54.738Z", "dateReserved": "2026-10-08T15:45:02.372Z", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "datePublished": "2026-10-12T15:17:45.545Z", "assignerShortName": "EEF"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:hexpm:hex:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Hex.HTTP.SSL'"], "packageName": "hex", "packageURL": "pkg:otp/hex?repository_url=https:%2F%2Fgithub.com%2Fhexpm%2Fhex&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Fhexpm%2Fhex.git", "product": "hex", "programFiles": ["lib/hex/http/ssl.ex"], "programRoutines": [{"name": "'Elixir.Hex.HTTP.SSL':ssl_opts/1"}, {"name": "'Elixir.Hex.HTTP.SSL':partial_chain/2"}], "repo": "https://github.com/hexpm/hex", "vendor": "hexpm", "versions": [{"lessThan": "2.5.2", "status": "affected", "version": "0.20.2", "versionType": "semver"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:hexpm:hex:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Hex.HTTP.SSL'"], "packageName": "hexpm/hex", "packageURL": "pkg:github/hexpm/hex", "product": "hex", "programFiles": ["lib/hex/http/ssl.ex"], "programRoutines": [{"name": "'Elixir.Hex.HTTP.SSL':ssl_opts/1"}, {"name": "'Elixir.Hex.HTTP.SSL':partial_chain/2"}], "repo": "https://github.com/hexpm/hex", "vendor": "hexpm", "versions": [{"changes": [{"at": "5f5a2136c7cf5991b6e8a30d645ca9f8e74b0785", "status": "unaffected"}, {"at": "6232a6498015e559743bec4f4fbec9138837cec8", "status": "unaffected"}], "lessThan": "*", "status": "affected", "version": "c9b26a46928bfcd546773571e09c1d05f4cd9fb7", "versionType": "git"}]}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacerts_path to a CA store that leaves that CA out.\n\ncacerts_path (HEX_CACERTS_PATH) is documented as the path to the CA certificate store, used instead of the CA bundle that ships with Hex. Hex.HTTP.SSL.ssl_opts/1 passes the configured store as the cacerts option, but builds the partial_chain callback from the bundled store whether cacerts_path is set or not. Hex.HTTP.SSL.partial_chain/2 accepts a server chain when any certificate in it has the same public key as a bundled CA certificate, so a chain that leads to a bundled CA passes verification although the configured store doesn't contain that CA. Hostname verification still applies.\n\nThis issue affects hex: from 0.20.2 before 2.5.2."}], "id": "CVE-2026-103503", "lastModified": "2026-11-11T15:17:12.590", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-103503", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T17:30:53.768172Z", "version": "2.0.3"}}]}, "published": "2026-10-12T16:17:02.427", "references": [{"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://cna.erlef.org/cves/CVE-2026-103503.html"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://github.com/hexpm/hex/commit/5f5a2136c7cf5991b6e8a30d645ca9f8e74b0785"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://github.com/hexpm/hex/commit/6232a6498015e559743bec4f4fbec9138837cec8"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://github.com/hexpm/hex/commit/c9b26a46928bfcd546773571e09c1d05f4cd9fb7"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://github.com/hexpm/hex/security/advisories/GHSA-rw8q-hg7m-cxgr"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://osv.dev/vulnerability/EEF-CVE-2026-103503"}], "sourceIdentifier": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}]}

{"bugzilla": {"description": "hex: hex: Host impersonation via improper CA certificate store validation", "id": "2549700", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2549700"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-295", "details": ["Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacerts_path to a CA store that leaves that CA out.\ncacerts_path (HEX_CACERTS_PATH) is documented as the path to the CA certificate store, used instead of the CA bundle that ships with Hex. Hex.HTTP.SSL.ssl_opts/1 passes the configured store as the cacerts option, but builds the partial_chain callback from the bundled store whether cacerts_path is set or not. Hex.HTTP.SSL.partial_chain/2 accepts a server chain when any certificate in it has the same public key as a bundled CA certificate, so a chain that leads to a bundled CA passes verification although the configured store doesn't contain that CA. Hostname verification still applies.\nThis issue affects hex: from 0.20.2 before 2.5.2.", "A flaw was found in hex. When a custom Certificate Authority (CA) store is configured to restrict trusted authorities, hex inadvertently continues to validate certificate chains against its bundled CA certificates. An attacker capable of intercepting network traffic and holding a certificate issued by a bundled CA can impersonate a trusted host to the client. This issue can result in unauthorized data disclosure or tampering."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-103503", "public_date": "2026-10-12T15:17:45Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-103503\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-103503\nhttps://cna.erlef.org/cves/CVE-2026-103503.html\nhttps://github.com/hexpm/hex/commit/5f5a2136c7cf5991b6e8a30d645ca9f8e74b0785\nhttps://github.com/hexpm/hex/commit/6232a6498015e559743bec4f4fbec9138837cec8\nhttps://github.com/hexpm/hex/commit/c9b26a46928bfcd546773571e09c1d05f4cd9fb7\nhttps://github.com/hexpm/hex/security/advisories/GHSA-rw8q-hg7m-cxgr\nhttps://osv.dev/vulnerability/EEF-CVE-2026-103503"], "statement": "hex, the package manager for the Erlang/Elixir ecosystem, is affected by a moderate-impact improper certificate validation vulnerability in Red Hat's community offerings. When a custom CA certificate store is configured via cacerts_path (HEX_CACERTS_PATH) to restrict which certificate authorities are trusted, Hex continues to validate server certificate chains against the CA bundle that ships with Hex, because the partial_chain callback is built from the bundled store regardless of the configuration. As a result, a network attacker who can intercept HTTPS connections and who holds a certificate for a Hex host issued by one of the bundled CAs can impersonate that host to clients whose custom store omits that CA; hostname verification still applies. Successful impersonation allows the attacker to capture the API keys, OAuth tokens, and repository keys that Hex transmits and to alter API responses, although registry signatures and package checksums continue to prevent changes to registry contents and packages. Only users who set cacerts_path to a store that leaves out some of the bundled CAs are exposed; users who rely on the default bundled store are not affected. Red Hat and upstream both rate this flaw moderate severity (Red Hat CVSS 6.8, upstream 5.9). This flaw is recorded as affecting Red Hat community offerings (Fedora and EPEL streams) and a fix is being pursued through the community delegation process.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.20.2,2.5.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "c9b26a46928bfcd546773571e09c1d05f4cd9fb7"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "hex", "vendor": "hexpm"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.20.2,2.5.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "hex", "source": "cna", "vendor": "hexpm"}, "product": "hex", "vendor": "hexpm"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "c9b26a46928bfcd546773571e09c1d05f4cd9fb7"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "hex", "source": "cna", "vendor": "hexpm"}, "product": "hex", "vendor": "hexpm"}], "created": "2026-10-12T16:45:13.669691+00:00", "updated": "2026-10-12T17:00:14.567667+00:00", "vendors": ["hexpm", "hexpm$PRODUCT$hex"]}