Attack Chain

1. Attacker gains access to a system that uses either the bsv-sdk or bsv-wallet Ruby gem.
2. The attacker invokes the acquire_certificate function with acquisition_protocol: 'direct'.
3. The attacker supplies arbitrary certificate fields, including a forged signature, a certifier, serial_number, and revocation_outpoint.
4. Alternatively, the attacker invokes the acquire_certificate function with acquisition_protocol: 'issuance' and specifies a malicious certifier URL they control.
5. The vulnerable acquire_certificate function persists the attacker-supplied certificate data to storage without verifying the certifier’s signature.
6. The attacker or a downstream process invokes list_certificates or prove_certificate to retrieve the forged certificate.
7. The application trusts the forged certificate as authentic, leading to credential forgery and potential unauthorized access or privilege escalation.

Impact

Successful exploitation of this vulnerability allows an attacker to forge identity certificates attributed to arbitrary certifier identities. This can lead to credential forgery, where the attacker can assert false attributes about a subject. Applications relying on the wallet’s certificate store for identity attributes, such as KYC assertions or role claims, become vulnerable to credential forgery. This is a credential-forgery primitive, not merely a spec divergence from BRC-52.

Recommendation

• Upgrade to bsv-sdk >= 0.8.2 or bsv-wallet >= 0.3.4 to patch the vulnerability. These versions implement signature verification using BSV::Wallet::CertificateSignature and raise BSV::Wallet::CertificateSignature::InvalidError for invalid certificates.
• If upgrading is not immediately possible, do not expose acquire_certificate (either acquisition protocol) to untrusted callers, as described in the Workarounds section of this brief.
• If upgrading is not immediately possible, treat any record returned by list_certificates / prove_certificate as unverified and perform an out-of-band BRC-52 verification against the certifier’s public key before acting on it.