A critical vulnerability in jahlives openssl_encrypt allows unauthenticated attackers to substitute public keys, leading to complete compromise of identity and data confidentiality.

The software fails to re-derive and validate fingerprints when loading identities from identity.json, which is a failure of data authenticity verification (CWE-345). This allows an unauthenticated attacker to replace legitimate public keys with their own while maintaining the original fingerprint.

The impact of this vulnerability is severe, as it allows for man-in-the-middle attacks and silent key substitution. Because the system continues to report valid signatures, an attacker can intercept and decrypt sensitive communications or forge data, leading to a total loss of confidentiality and integrity. With a CVSS score of 9.8, this flaw represents a critical risk to any system relying on this library for secure identity management.

Immediate Action: Update the jahlives openssl_encrypt library to version 1.4.9 or later immediately.

Proactive Monitoring: Review audit logs for unauthorized modifications to the identity.json file or unexpected changes in key fingerprints.

Compensating Controls: Implement strict file integrity monitoring on the directory containing identity stores and ensure that identity.json files are protected by restrictive filesystem permissions.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

This vulnerability presents a significant risk to organizational security due to the potential for transparent identity spoofing. Administrators must prioritize updating to version 1.4.9 immediately to restore the integrity of the identity validation process. Failure to patch allows attackers to bypass core cryptographic protections, rendering existing encryption and signature mechanisms ineffective.