CVE-2026-76245

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-76245
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-76245.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-76245
Aliases
Published
2026-08-19T14:02:21.529Z
Modified
2026-08-21T03:30:15.874303172Z
Severity
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
stigmem Federation Peer Token Timestamp Validation Bypass
Details

stigmem (pip package stigmem-node) version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly treated as expired. This affects the availability and reliability of authenticated federation flows on nodes using federation peer authentication paths. The issue is fixed in 0.9.0a2, which uses the canonical millisecond-based validation path.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-345"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76245.json"
}
References

Affected packages

Git / github.com/eidetic-labs/stigmem

Affected ranges

Type
GIT
Repo
https://github.com/eidetic-labs/stigmem
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
18ec5dbe3a3970d804f2013b4ae53dd2da8ed4ac
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.9.0a2"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-76245.json"