Live › vulnerability › CVE-2026-95859
Go to dashboardlibp2p-rust, the Rust implementation of the libp2p networking stack, accepts Gossipsub GRAFT messages for topics a peer never subscribed to, storing each new topic hash per peer. A remote unauthenticated peer can keep sending new topics to grow memory until the process runs out and crashes (denial of service).
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the libp2p-gossipsub crate version in Cargo.lock; affected if below 0.49.5.
Upgrade libp2p-gossipsub (libp2p-rust) to 0.49.5 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.49.5, Gossipsub GRAFT control-message handling unconditionally adds attacker-supplied topic hashes to connected_peer.topics without confirming that the peer previously subscribed to those topics. A remote unauthenticated peer that can reach a Gossipsub listener can repeatedly send novel GRAFT topics, causing cumulative per-peer memory growth that is not bounded by subscription filters, peer scoring, or per-message size limits. This can exhaust process memory and cause a denial of service. This issue is fixed in version 0.49.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-95859")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.