Vulnerability · Published Sep 11, 2026 · Assigned by VulnCheck
CVE-2026-89146libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses
High 7.5
In plain English
A high-severity integer overflow in libp2p-rendezvous from libp2p. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 49.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when computing the expiry timer.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| libp2p | libp2p-rendezvous | 0 – through 0.17.1 |
Weakness: CWE-190, CWE-617 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- libp2p-rendezvous registration lifetime denial of service third-party-advisory
- src/client.rs at libp2p-rendezvous 0.17.1 technical-description
- Product product
- VulnCheck Advisory: libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses third-party-advisory