CVE-2026-78807

A flaw was found in wpa_supplicant. A local attacker can exploit missing validation in the driver-based PMKSA (Pairwise Master Key Security Association) selection path to bypass proper network context and AKMP (Authentication Key Management Protocol) matching for PMKSA caching. This could allow the attacker to gain unauthorized access to cached network credentials.

This vulnerability is rated as an Important severity flaw because an unprivileged local attacker can compromise cached cryptographic keys and bypass network profile authentication boundaries without requiring elevated privileges. On typical Red Hat Enterprise Linux server installations, exposure is limited as wireless networking and 802.1X authenticators are rarely configured or active. However, endpoint and workstation deployments utilizing wpa_supplicant with hardware-offloaded roaming remain vulnerable to unauthorized key association across separate network profiles.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.