Libp2P Rendezvous vulnerabilities

1 vulnerability

Known vulnerabilities in Libp2P Rendezvous, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2026-89146libp2plibp2p-rendezvous
EPSS score
0.63%
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when computing the expiry timer.