CVE-2026-76244

Name of the Vulnerable Software and Affected Versions stigmem-node (affected versions not specified)

Description An insecure default configuration allows federation traffic to traverse networks without mTLS (mutual Transport Layer Security, a process where both parties in a communication session authenticate each other) protection when non-loopback endpoints are enabled. Operators who explicitly disable mTLS while binding federation to non-loopback addresses expose federation traffic to cleartext interception and man-in-the-middle attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.