Erlang/OTP TLS 1.3 PSK Resumption Lacks Peer Authentication
Vulnerability Disclosure · 14 sources · Updated 2mo ago · First seen Jul 19, 2006
CVE-2026-89422 affects Erlang/OTP's TLS 1.3 session-resumption handling, where a client that detects the pre_shared_key extension in ServerHello treats the handshake as resumed and proceeds from EncryptedExtensions directly to the finished-message stage. This path bypasses the normal certificate and certificate-verification processing used for full TLS handshakes.
The issue maps to CWE-322: Key Exchange without Entity Authentication. An attacker able to impersonate or intercept a target TLS endpoint could exploit missing peer-identity validation during PSK resumption to conduct man-in-the-middle or server-impersonation attacks, potentially exposing credentials and application data despite use of encryption. Organizations using Erlang/OTP TLS 1.3 should identify affected deployments and apply vendor remediation or restrict vulnerable resumption paths when available.
