Skip to content
Fencer Vulns
low 1.7

CVE-2026-26958 json

filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity

published 2026-02-17 8 mo ago modified 2026-09-10 1 mo ago also GHSA-fw7p-63qq-7hpr , GO-2026-4503 , EUVD-2026-8418

cvss
1.7
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 36%
public exploits
0
none known

Summary

filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If (*Point).MultiScalarMult is called on an initialized point that is not the identity point, it returns an incorrect result. If the method is called on an uninitialized point, the behavior is undefined. In particular, if the receiver is the zero value, MultiScalarMult returns an invalid point that compares Equal to every other point. Note that MultiScalarMult is a rarely used, advanced API. For example, users who depend on filippo.io/edwards25519 only through github.com/go-sql-driver/mysql are not affected. This issue has been fixed in version 1.1.1.

Patch / fix

  • go filippo.io/edwards25519 1.1.1
  • golang-filippo-edwards25519 Debian 14 1.2.0-1

debian advisories DEBIAN-CVE-2026-26958

  • alloy SLE Module for Basesystem 15 SP7 1.16.1-150700.15.20.1
  • grafana Multi Linux Manager Tools SLE-15 11.6.14+security01-150002.4.14.1
  • spacecmd Multi Linux Manager Tools SLE-15 5.1.13-150002.3.9.3
  • uyuni-tools Multi Linux Manager Tools SLE-Micro-5, Multi Linux Manager Tools SLE-15 5.1.26-150002.3.12.1
  • prometheus-blackbox_exporter Multi Linux Manager Tools SLE-Micro-5, Multi Linux Manager Tools SLE-15 0.26.0-150002.3.6.1
  • golang-github-prometheus-prometheus Multi Linux Manager Tools SLE-15 3.5.0-150002.3.8.1
  • golang-github-lusitaniae-apache_exporter Multi Linux Manager Tools SLE-15 1.0.10-150002.3.6.1
  • cosign SLES for SAP applications 16.0, SLES 16.0 3.0.5-160000.1.1

suse advisories SUSE-SU-2026:2438-1SUSE-SU-2026:1524-1SUSE-SU-2026:20904-1SUSE-SU-2026:0777-1SUSE-SU-2026:0757-1

  • kumactl openSUSE Tumbleweed 3.0.0-1.1
  • gopass openSUSE Tumbleweed 1.17.0-1.1
  • govulncheck-vulndb openSUSE Leap 16.0 0.0.20260723T184607-160000.1.1
  • grafana openSUSE Leap 16.0 11.6.14+security04-bp160.1.1
  • alloy openSUSE Tumbleweed 1.15.1-1.1
  • grafana openSUSE Tumbleweed 11.6.14+security01-1.1
  • cosign openSUSE Leap 16.0 3.0.5-160000.1.1
  • cosign openSUSE Tumbleweed 3.0.5-1.1

opensuse advisories openSUSE-SU-2026:12300-1openSUSE-SU-2026:11650-1openSUSE-SU-2026:21483-1openSUSE-SU-2026:20940-1openSUSE-SU-2026:10618-1openSUSE-SU-2026:10601-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-26958 updated cvss 3.7

filippo.io/edwards25519: filippo.io/edwards25519: Cryptographic integrity bypass due to incorrect MultiScalarMult results

  • Red Hat Cryostat 4 cryostat/cryostat-storage-rhel9 Red Hat Custom Metric Autoscaler operator for Red Hat Openshift custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9, custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator, custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9 Red Hat Multicluster Global Hub multicluster-globalhub/multicluster-globalhub-agent-rhel9, multicluster-globalhub/multicluster-globalhub-grafana-rhel9, multicluster-globalhub/multicluster-globalhub-manager-rhel9, multicluster-globalhub/multicluster-globalhub-rhel9-operator Red Hat OpenShift Pipelines openshift-pipelines-client, openshift-pipelines/pipelines-opc-rhel9, openshift-pipelines/pipelines-cli-tkn-rhel8, openshift-pipelines/pipelines-cli-tkn-rhel9, openshift-pipelines/pipelines-rhel8-operator, openshift-pipelines/pipelines-operator-bundle, +3 more Red Hat OpenShift Serverless openshift-serverless-1/kn-plugin-event-sender-rhel9 Red Hat 3scale API Management Platform 2 3scale-amp26/operator, 3scale-amp26/3scale-operator, 3scale-amp2/3scale-rhel7-operator, 3scale-amp2/3scale-rhel9-operator, 3scale-amp2/3scale-operator-bundle
    +4 more products
    Red Hat Advanced Cluster Management for Kubernetes 2 rhacm2/acm-grafana-rhel9 Red Hat OpenShift AI (RHOAI) rhoai/odh-model-registry-rhel9, rhoai/odh-ml-pipelines-driver-rhel9, rhoai/odh-ml-pipelines-launcher-rhel9, rhoai/odh-mod-arch-model-registry-rhel9, rhoai/odh-ml-pipelines-api-server-v2-rhel9, rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9, +1 more Red Hat OpenShift Container Platform 4 openshift4/oc-mirror-plugin-rhel9, openshift4/azure-service-rhel9-operator, openshift4/ose-baremetal-installer-rhel9 Red Hat OpenShift GitOps openshift-gitops-1/dex-rhel8
    affected: no fix available “Fix deferred”
  • Red Hat Trusted Artifact Signer rhtas/cosign-rhel9, rhtas/fulcio-rhel9, rhtas/gitsign-rhel9, rhtas/rekor-cli-rhel9, rhtas/createtree-rhel9, rhtas/updatetree-rhel9, +10 more
    affected: no fix planned “Out of support scope”
  • Red Hat Security Profiles Operator compliance/openshift-security-profiles-rhel8-operator, compliance/openshift-security-profiles-operator-bundle Red Hat Zero Trust Workload Identity Manager zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9, zero-trust-workload-identity-manager/spiffe-spire-server-rhel9, zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9
    affected: no fix available “Fix deferred”
  • Red Hat Zero Trust Workload Identity Manager - Tech Preview zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9, zero-trust-workload-identity-manager/spiffe-spire-server-rhel9, zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9, zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9, zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle
    affected: no fix planned “Out of support scope”

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
8 mo ago

Exploit prediction

0.41% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 1.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
CNA 4.0 1.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected packages

ecosystem package affected fixed in
go filippo.io/edwards25519
<1.1.1
1.1.1

Affected products

  • FiloSottile filippo.io/edwards25519

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.