Cryptographic Flaw in wolfSSL's TLS Handshake Affects Secure Communication
CVE-2026-3230

1.2LOW

Key Information:

Vendor

Wolfssl

Status
Wolfssl
Vendor
CVE Published:
19 March 2026

What is CVE-2026-3230?

A cryptographic flaw exists in the TLS 1.3 client HelloRetryRequest handshake logic of wolfSSL. This vulnerability could be exploited to compromise the confidentiality of TLS-protected communications. An attacker could craft a HelloRetryRequest that, when followed by a ServerHello message lacking the necessary key_share extension, might allow for the derivation of predictable traffic secrets from the (EC)DHE shared secret. While this issue does not affect the client’s ability to authenticate the server during TLS handshakes, it poses significant risks to the privacy of data transmissions.

Affected Version(s)

wolfSSL 0 < 5.9.0

References

https://github.com/wolfSSL/wolfssl/pull/9754

CVSS V4

Score:
1.2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jaehun Lee, Pohang University of Science and Technology (POSTECH)
Kyungmin Bae, Pohang University of Science and Technology (POSTECH)
.