TI-2026-83878 Aliases CVE-2026-109140 GHSA-7mpx-94gm-vm7j

Nonce reuse in NLnet Labs Krill lets users forge admin login tokens

LOW 38CWE-323Published 2026-11-02 · Updated 2026-11-02

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: High · High · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

NLnet Labs Krill encrypts login-session tokens with a nonce from a counter that resets to 0 on every restart, so the same key and nonce pair is reused (CWE-323). A remote user with low privileges who can log in can forge an admin token. The attack needs high complexity, and the impact is high confidentiality and integrity loss with a scope change.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Description from the CNA

The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 on every Krill restart, so the same (key, nonce) pair is used again after each restart.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00309 23rd percentileScored 2026-11-07

Fix Fixed Krill (NLnet Labs): 0.16.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
NLnet Labs	Krill	—	0.16.1	Patch available	CNA

Krill VendorNLnet Labs Affected — Fixed in 0.16.1 Patch available CNA

Remediation

Upgrade Krill to version 0.16.1, which fixes this flaw.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Fix · CNA Krill (NLnet Labs) Fixed in 0.16.1

Timeline

2026-11-02 Threatist record created from CVE-2026-109140
2026-11-02 CISA SSVC decision points changed
2026-11-02 Priority changed: MEDIUM → LOW
2026-11-02 Alias added: GHSA-7mpx-94gm-vm7j

References

Advisory 1

https://www.nlnetlabs.nl/downloads/krill/CVE-2026-109140.txt

TI-2026-25690 Possible arbitrary code execution during DNSSEC validation CVSS 4.0CRITICAL 9.1
TI-2026-56302 Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY CVSS 4.0CRITICAL 9.1
TI-2026-31146 Crash during DNSSEC validation of malicious content CVSS 4.0HIGH 8.7
TI-2026-31135 Heap overflow with multiple NSID, COOKIE, PADDING EDNS options CVSS 4.0HIGH 8.7
TI-2026-36436 Routinator crashes on specifically crafted RRDP XML files CVSS 4.0HIGH 8.7
TI-2026-36433 Routinator exits when accepting an incoming HTTP or RTR connection fails CVSS 4.0HIGH 8.7

See all 96 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences