Memory Exhaustion Vulnerability in libp2p Networking Stack by libp2p-rust

CVE-2026-35405

What is CVE-2026-35405?

The libp2p-rust networking stack is susceptible to a memory exhaustion issue due to lack of limits on namespace registrations by peers. This allows malicious actors to continuously register new namespaces, leading to excessive memory allocation and eventual operational failure of the server. Specifically, the libp2p-rendezvous server does not enforce restrictions on the number of namespaces a peer can register, resulting in resource depletion and potential server crashes if exploited extensively or by multiple malicious peers.

References