opennhp

OpenNHP：オープンソースのゼロトラスト・セキュリティ・ツールキット OpenNHP は軽量かつ暗号技術を基盤としたオープンソースのツールキットであり、インフラ・アプリケーション・データに対してゼロトラスト・セキュリティを実現します。クラウドセキュリティアライアンス（CSA） の Network-infrastructure Hiding Protocol（NHP）仕様 のリファレンス実装であり、次の 2 つのコアプロトコルを備えています： Network-infrastructure Hiding Protocol（NHP）： サーバーのポート、IP...

CVE-2026-92792

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...

EUVD-2026-81055

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...

CVE-2026-92792

OpenNHP through version 1.0.2 is vulnerable to an authentication bypass in its trusted-execution attestation mechanism. The verifier selection logic is driven by attacker-supplied evidence: if the evidence contains a test_purpose key, the FallbackVerifier is selected and executes unconditionally....

CVE-2026-92792 OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifier

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...

CVE-2026-92792 OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifier

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...

CVE-2026-92792 OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifier

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...

CVE-2026-92792: Improper Authentication

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...

opennhp v1.0.1

OpenNHP: Open Source Zero Trust Security Toolkit OpenNHP is a lightweight, cryptography-powered, open-source toolkit implementing Zero Trust security for infrastructure, applications, and data. It is the reference implementation of the Cloud Security Alliance CSA Network-infrastructure Hiding...