Read the docs
TI-2026-21028 Aliases CVE-2026-26014GHSA-9f3f-wv7r-qc8r

Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key

Priority LOW 28CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-200.

Summary

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack". Upgrade to v3.0.11, v3.1.1, or later.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00687 52nd percentileScored 2026-11-07
Fix Partial dtls (pion): 3.0.11github.com/pion/dtls/v3 (Go): 3.1.1, 3.0.11Red Hat: 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
piondtls= 3.1.0; before 3.0.113.0.11Patch availableCNA
—github.com/pion/dtls/v3 (Go)3.1.0 to before 3.1.13.1.1Patch availableGHSA-9f3f-wv7r-qc8r
—github.com/pion/dtls/v2 (Go)up to 2.2.12—No fix listedGHSA-9f3f-wv7r-qc8r
—github.com/pion/dtls (Go)up to 1.5.4—No fix listedGHSA-9f3f-wv7r-qc8r
—github.com/pion/dtls/v3 (Go)before 3.0.113.0.11Patch availableGHSA-9f3f-wv7r-qc8r
  • dtls Vendorpion Affected = 3.1.0; before 3.0.11 Fixed in 3.0.11 Patch available CNA
  • github.com/pion/dtls/v3 (Go) Vendor— Affected 3.1.0 to before 3.1.1 Fixed in 3.1.1 Patch available GHSA-9f3f-wv7r-qc8r
  • github.com/pion/dtls/v2 (Go) Vendor— Affected up to 2.2.12 Fixed in — No fix listed GHSA-9f3f-wv7r-qc8r
  • github.com/pion/dtls (Go) Vendor— Affected up to 1.5.4 Fixed in — No fix listed GHSA-9f3f-wv7r-qc8r
  • github.com/pion/dtls/v3 (Go) Vendor— Affected before 3.0.11 Fixed in 3.0.11 Patch available GHSA-9f3f-wv7r-qc8r

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:pion:dtls:*:*:*:*:*:*:*:*before 3.1.0Vulnerablepion
  • cpe:2.3:a:pion:dtls:*:*:*:*:*:*:*:* Versions before 3.1.0 Vulnerable ·pion

Remediation

  • Fix · CNA dtls (pion) Fixed in 3.0.11
  • Fix · GHSA-9f3f-wv7r-qc8r github.com/pion/dtls/v3 (Go) Fixed in 3.1.1 Advisory →
  • Fix · GHSA-9f3f-wv7r-qc8r github.com/pion/dtls/v3 (Go) Fixed in 3.0.11 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Network Observability OperatorAffectedNo fix yet: Fix deferred

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-26014
  2. 2026-10-03 Alias added: GHSA-9f3f-wv7r-qc8r

References

Patch 3

Advisory 1

Other 4

  • TI-2019-15006 handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application… CVSS 3.1CRITICAL 9.8
  • TI-2022-11733 Header reconstruction method can be thrown into an infinite loop in Pion DTLS CVSS 3.1HIGH 7.5
  • TI-2022-11765 Improper Certificate Validation in Pion DTLS CVSS 3.1HIGH 7.5
  • TI-2022-11732 Buffer for inbound DTLS fragments has no limit CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences