8.6

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-44697

CVE-2026-44697: Klever-Go MultiDataInterceptor: remote OOM via crafted compressed P2P payload

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (data/batch/batch.go) allows any peer that participates in a topic served by MultiDataInterceptor to allocate multi-gigabyte heaps on the receiving node from a sub-50 KiB gossip payload. A single packet is sufficient to OOM-kill a validator with conventional memory provisioning. Fleet-wide application affects chain liveness. This vulnerability is fixed in 1.7.17.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-44697

CVE-2026-44697:

8.6

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/klever-io/klever-go	go	<= 1.7.16

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the message processing pipeline of Klever-Go, specifically in how compressed P2P payloads are handled. The root cause is an unbounded decompression in the decompressGzip function located in data/batch/batch.go. This function reads the entire decompressed stream into memory without any limits, making it vulnerable to a "decompression bomb" attack where a small, highly-compressed payload can expand to consume a massive amount of memory.

The vulnerable decompressGzip function is called by Batch.Decompress, which is responsible for decompressing batch data. The attack is triggered when a remote peer sends a malicious gossip message to a topic served by MultiDataInterceptor. The MultiDataInterceptor.ProcessReceivedMessage function, located in core/process/interceptors/multiDataInterceptor.go, receives the message and calls Batch.Decompress.

A critical flaw in the logic is that the anti-flood defenses, which are meant to prevent resource exhaustion attacks, are ineffective. The size of the incoming message is checked before decompression, so a small compressed bomb passes the check. The check for the number of items in the batch occurs after the memory-exhausting decompression has already happened. This allows an unauthenticated remote attacker to cause an Out-Of-Memory (OOM) crash on the node with a single, small packet, leading to a denial of service.

Vulnerable functions

decompressGzip

data/batch/batch.go

This function performs an unbounded `io.ReadAll` on a gzip reader, which can lead to excessive memory allocation when processing a decompression bomb.

Batch.Decompress

data/batch/batch.go

This method calls the vulnerable `decompressGzip` function without any size validation on the compressed data. It processes a potentially malicious payload, leading to the decompression bomb being triggered.

MultiDataInterceptor.ProcessReceivedMessage

core/process/interceptors/multiDataInterceptor.go

This function is the entry point that receives messages from the network. It calls `Batch.Decompress` to handle compressed messages. Crucially, the anti-flood mechanism is checked after decompression, allowing an attacker to send a small compressed payload that will cause a large allocation before any limits are checked.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.