AIKIDO-2026-221643
Mbed-TLS.mbedtls is vulnerable to Improper Verification of Cryptographic Signature
60
Medium Risk
This Affects:
Mbed-TLS.mbedtlsTL;DR
Mbed TLS contains an improper public key validation vulnerability in its PSA FFDH key agreement implementation. A malicious peer can supply an invalid public key that forces the shared secret into a small set of predictable values, violating the expected contributory behavior of the key exchange. The security impact depends on the protocol using FFDH, although TLS 1.2 and TLS 1.3 are not affected.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and use the PSA FFDH APIs (PSA_ALG_FFDH) in a protocol that requires contributory Diffie-Hellman behavior (TLS 1.2 and TLS 1.3 are not affected).
Background info
Mbed-TLS.mbedtls is vulnerable to Improper Verification of Cryptographic Signature in versions 0.0.1 - 3.6.5.
How to fix this
Upgrade to a patched version. If upgrading is not possible, validate peer FFDH public keys against the expected group parameters before performing key agreement.
Links
GitHub Release
Other
mbed-tls.readthedocs.io/en/latest/security-advisories/mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-ffdh-peerkey-checks/
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant