CVE Feed

    Dashboard / CVE / CVE-2026-44697

    CVE-2026-44697

    Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (data/batch/batch.go) allows any peer that participates in a topic served by MultiDataInterceptor to allocate multi-gigabyte heaps on the receiving node from a sub-50 KiB gossip payload. A single packet is sufficient to OOM-kill a validator with conventional memory provisioning. Fleet-wide application affects chain liveness. This vulnerability is fixed in 1.7.17.

    Published:May 29, 2026
    Last Modified:Jun 2, 2026
    EPS:May 29, 2026
    EPSS Score:0.0004
    CVSS Score:8.6

    Affected Products

    Vendor
    Klever-io
    Product
    Klever-go

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-55764 (CVSS 8.7) — Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint…
    CVE-2026-55763 (CVSS 8.7) — Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyalt…
    CVE-2026-54755 (CVSS 9.6) — Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields de…
    CVE-2026-54754 (CVSS 9.6) — Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement …
    CVE-2026-52880 (CVSS 7.5) — Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are …
    CVE-2026-52879 (CVSS 7.5) — Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the d…
    CVE-2026-52878 (CVSS 7.5) — Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulne…
    CVE-2026-49343 (CVSS 5.9) — Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account…
    CVE-2026-47249 (CVSS 7.5) — Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.18, the P2P resolver reques…
    CVE-2026-58262 (CVSS 7.1) — Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verifi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High