filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Partial Red Hat: 14 without a fix
Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat.
Summary
filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If (*Point).MultiScalarMult is called on an initialized point that is not the identity point, it returns an incorrect result. If the method is called on an uninitialized point, the behavior is undefined. In particular, if the receiver is the zero value, MultiScalarMult returns an invalid point that compares Equal to every other point. Note that MultiScalarMult is a rarely used, advanced API. For example, users who depend on filippo.io/edwards25519 only through github.com/go-sql-driver/mysql are not affected. This issue has been fixed in version 1.1.1.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| FiloSottile | filippo.io/edwards25519 | before 1.1.1 | 1.1.1 | Patch available | CNA |
| — | filippo.io/edwards25519 (Go) | before 1.1.1 | 1.1.1 | Patch available | GHSA-fw7p-63qq-7hpr |
- filippo.io/edwards25519 VendorFiloSottile Affected before 1.1.1 Fixed in 1.1.1 Patch available CNA
- filippo.io/edwards25519 (Go) Vendor— Affected before 1.1.1 Fixed in 1.1.1 Patch available GHSA-fw7p-63qq-7hpr
Remediation
- Fix · CNA filippo.io/edwards25519 (FiloSottile) Fixed in 1.1.1
- Fix · GHSA-fw7p-63qq-7hpr filippo.io/edwards25519 (Go) Fixed in 1.1.1 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Cryostat 4 | Affected | No fix yet: Fix deferred |
| Custom Metric Autoscaler operator for Red Hat Openshift | Affected | No fix yet: Fix deferred |
| Multicluster Global Hub | Affected | No fix yet: Fix deferred |
| OpenShift Pipelines | Affected | No fix yet: Fix deferred |
| OpenShift Serverless | Affected | No fix yet: Fix deferred |
| Red Hat 3scale API Management Platform 2 | Affected | No fix yet: Fix deferred |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift GitOps | Affected | No fix yet: Fix deferred |
| Red Hat Trusted Artifact Signer | Affected | No fix planned: Out of support scope |
| Security Profiles Operator | Affected | No fix yet: Fix deferred |
| Zero Trust Workload Identity Manager | Affected | No fix yet: Fix deferred |
| Zero Trust Workload Identity Manager - Tech Preview | Affected | No fix planned: Out of support scope |
Timeline
- 2026-10-02 Threatist record created from CVE-2026-26958
- 2026-10-03 Alias added: GHSA-fw7p-63qq-7hpr
References
Sources
- CVE-2026-26958 · CVE Program
- CVE-2026-26958 · NVD
- FIRST EPSS
- GHSA-fw7p-63qq-7hpr · GitHub Advisory Database · CC BY 4.0
- CVE-2026-26958 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences