CVE-2026-76242

Name of the Vulnerable Software and Affected Versions stigmem-node version 0.9.0a1

Description stigmem-node accepts federation peer key material during peer registration without requiring a separate administrator out-of-band fingerprint approval step. On nodes that accept federation peer registration over a network where initial registration can be intercepted or misdirected, an attacker can register a malicious peer to gain access to or tamper with federation traffic.

Recommendations Update stigmem-node to version 0.9.0a2.