CVE-2026-46679: Kad Dht Insufficient Initial Peers
The query manager incorrectly initiates queries by selecting only 'd' disjoint paths closest peers instead of selecting 'k' (kBucketSize) closest peers and dividing them evenly into 'd' buckets. This violates the robustness of the S/Kademlia spec, requiring an attacker to generate far fewer malicious nodes to orchestrate an eclipse attack on the DHT. To fix
TSgreprules fetch cve-2026-46679-kad-dht-insufficient-initial-peers --engine opengrepDescription
The query manager incorrectly initiates queries by selecting only 'd' disjoint paths closest peers instead of selecting 'k' (kBucketSize) closest peers and dividing them evenly into 'd' buckets. This violates the robustness of the S/Kademlia spec, requiring an attacker to generate far fewer malicious nodes to orchestrate an eclipse attack on the DHT. To fix
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.