Executive brief
AIIR is a cryptographic verification tool designed to validate the authenticity and policy compliance of software receipts. Multiple verification gates could incorrectly report success even when controls were not actually enforced—for example, unsigned or forged receipts could pass signature verification checks. An attacker could bypass verification controls by relying on these false-positive results, potentially accepting forged or non-conforming content that should have been rejected.
Technical details
Multiple fail-open vulnerabilities exist in AIIR's verification paths: a require_signing gate accepts forged/empty fields without valid signatures, a CI verification path returns success regardless of underlying results, a release-verification gate fails to enforce advertised policy limits, and a signature-verification path silently skips verification for certain input categories. These are logic errors in the control-enforcement layer, not cryptographic breaks. Exploitation requires an application to rely on the affected gates for security decisions; the vulnerability does not forge valid signatures or break content-addressed integrity of correctly-signed receipts.
Affected products
- Invariant Systems AI AIIR before 1.7.0
Timeline
- 2026-08-28: disclosed
- 2026-08-28: patched: fixed in version 1.7.0