CVE-2026-21895
rsa crate has potential panic on a prime being equal to 1
The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
rsa crate has potential panic on a prime being equal to 1
The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue.
- Record
CVE-2026-21895- CVSS 4.0
- 2.7 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U - Weakness
- CWE-703
- Updated
- 2026-11-02
EUVDEUVD-2026-1033
The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue.
- Record
EUVD-2026-1033- CVSS 4.0
- 2.7 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9c48-w39g-hm26
rsa crate has potential panic on a prime being equal to 1
When creating a RSA private key from its components, the construction panics, instead of returning an error, when one of the primes is 1.
Discovered by Christian Reitter from Radically Open Security during a security review for Proton AG.
- Record
GHSA-9c48-w39g-hm26- CVSS 4.0
- 2.7 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U - Weakness
- CWE-703
- Updated
- 2026-11-02
NVD
The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue.
- Record
CVE-2026-21895- CVSS 4.0
- 2.7 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-703
- Updated
- 2026-11-02
OSV
rsa crate has potential panic on a prime being equal to 1
The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue.
- Record
CVE-2026-21895- CVSS 4.0
- 2.7 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U - Weakness
- CWE-703
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-21895
The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue.
- Record
DEBIAN-CVE-2026-21895- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVGHSA-9c48-w39g-hm26
rsa crate has potential panic on a prime being equal to 1
When creating a RSA private key from its components, the construction panics, instead of returning an error, when one of the primes is 1.
Discovered by Christian Reitter from Radically Open Security during a security review for Proton AG.
- Record
GHSA-9c48-w39g-hm26- CVSS 4.0
- 2.7 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U - Weakness
- CWE-703
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-21895
The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue.
- Record
UBUNTU-CVE-2026-21895- CVSS 4.0
- 2.7 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10105-1 No score
teleport-17.7.14-1.1 on GA media
These are all security issues fixed in the teleport-17.7.14-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10105-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rsacrates.io |
through 0.9.9 | 0.9.10 |
rust-rsaDebian:13 |
All versions, plus listed versions 0.9.10-10.9.7-10.9.9-1 |
None known |
rust-rsaDebian:14 |
before 0.9.10-1, plus listed versions 0.9.7-10.9.9-1 |
0.9.10-1 |
rsacrates.io |
before 0.9.10 | 0.9.10 |
rust-rsaUbuntu:24.04:LTS |
All versions, plus listed versions 0.9.2-2 |
None known |
rust-rsaUbuntu:25.10 |
All versions, plus listed versions 0.9.7-1 |
None known |
teleportopenSUSE:Tumbleweed |
before 17.7.14-1.1 | 17.7.14-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-21895 is a low vulnerability (CVSS 2.7) in Rustcrypto Rsa, published January 6, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in rsa 0.9.10.
References
github.com/RustCrypto/RSA/security/advisories/GHSA-9c48-w39g-hm26
nvd.nist.gov/vuln/detail/CVE-2026-21895
security-tracker.debian.org/tracker/CVE-2026-21895