CVE-2026-26315: Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake

(updated )

Through a flaw in the ECIES cryptography implementation, an attacker may be able to extract bits of the p2p node key.

References

Code Behaviors & Features

Detect and mitigate CVE-2026-26315 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →