CVE-2026-45783: Kademlia Dht Sybil Predictable Paths

Directly extracting the exact 'd' closest peers from the routing table for Kademlia DHT disjoint paths leaves the lookup vulnerable to Sybil/Eclipse attacks. If an attacker controls the 'd' closest node IDs, they will intercept and control all query paths. Fix this by retrieving a wider pool of closest peers (e.g., `kBucketSize`) and drawing from it probabil

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0JS
greprules fetch cve-2026-45783-kademlia-dht-sybil-predictable-paths --engine opengrep

Description

Directly extracting the exact 'd' closest peers from the routing table for Kademlia DHT disjoint paths leaves the lookup vulnerable to Sybil/Eclipse attacks. If an attacker controls the 'd' closest node IDs, they will intercept and control all query paths. Fix this by retrieving a wider pool of closest peers (e.g., `kBucketSize`) and drawing from it probabil