Vulnerability Description
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, a vulnerable node can be forced to shutdown/crash using a specially crafted message. The problem is resolved in the v1.16.9 and v1.17.0 releases of Geth.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ethereum | Go Ethereum | < 1.16.9 |
Related Weaknesses (CWE)
References
- https://github.com/ethereum/go-ethereum/commit/895a8597cb16c02203e38707ed2d1da5cPatch
- https://github.com/ethereum/go-ethereum/releases/tag/v1.16.9Release Notes
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-2gjw-fg97-vg3rVendor Advisory
FAQ
What is CVE-2026-26314?
CVE-2026-26314 is a vulnerability with a CVSS score of 7.5 (HIGH). go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, a vulnerable node can be forced to shutdown/crash using a specially crafted message. Th...
How severe is CVE-2026-26314?
CVE-2026-26314 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-26314?
Check the references section above for vendor advisories and patch information. Affected products include: Ethereum Go Ethereum.