Cosign's verify-blob-attestation reports false positive when payload parsing fails
Package
Affected versions
>= 3.0.0, < 3.0.6
< 2.6.3
Patched versions
3.0.6
2.6.3
Description
Published by the National Vulnerability Database
Apr 7, 2026
Published to the GitHub Advisory Database
Apr 8, 2026
Reviewed
Apr 8, 2026
Last updated
Apr 8, 2026
Description
cosign verify-blob-attestationmay erroneously report a "Verified OK" result for attestations with malformed payloads or mismatched predicate types. For old-format bundles and detached signatures, this was due to a logic flaw in the error handling of the predicate type validation. For new-format bundles, the predicate type validation was bypassed completely.Impact
When
cosign verify-blob-attestationis used without--check-claimsset totrue, an attestation that has a valid signature but a malformed or unparsable payload would be incorrectly validated. Additionally, systems relying on--type <predicate type>to reject attestations with mismatched types would be lead to trust the unexpected attestation type.Patches
v3.0.6, v2.6.3
Workarounds
Always set
--check-claims=truefor attestation verification.References