CVE-2026-22862

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security-advisories@github.com

Published

2026-01-13

Last modified

2026-01-15

Weaknesses

CWE-20

Affected products

• Go-ethereum (Ethereum)
• Go Ethereum (Ethereum)

References

• https://github.com/ethereum/go-ethereum/commit/abeb78c647e354ed922726a1d719ac7bc64a07e2
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-mr7q-c9w9-wh4h