CVE-2026-45783: Kad Dht Eclipse Vulnerability

Starting a DHT lookup by selecting exactly the `d` (`disjointPaths`) closest peers from the routing table makes the network vulnerable to an eclipse attack (CVE-2026-45783). An attacker controlling the `d` closest nodes will compromise all disjoint lookup paths. Instead, fetch up to a larger threshold (e.g., `kBucketSize`) of closest peers and randomly parti

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2026-45783-kad-dht-eclipse-vulnerability --engine opengrep

Description

Starting a DHT lookup by selecting exactly the `d` (`disjointPaths`) closest peers from the routing table makes the network vulnerable to an eclipse attack (CVE-2026-45783). An attacker controlling the `d` closest nodes will compromise all disjoint lookup paths. Instead, fetch up to a larger threshold (e.g., `kBucketSize`) of closest peers and randomly parti