Vulnerability in auth project #2384
Description
While working on auth project, I identified CVE-2026-26315 affecting the Go Ethereum package maintained by the Ethereum Foundation. The issue is caused by improper validation of the ECIES public key during the RLPx handshake, which could allow attackers to extract portions of a node’s private key and potentially impersonate or intercept peer communications.