CVE-2026-26958 Details
Description
filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If (*Point).MultiScalarMult is called on an initialized point that is not the identity point, it returns an incorrect result. If the method is called on an uninitialized point, the behavior is undefined. In particular, if the receiver is the zero value, MultiScalarMult returns an invalid point that compares Equal to every other point. Note that MultiScalarMult is a rarely used, advanced API. For example, users who depend on filippo.io/edwards25519 only through github.com/go-sql-driver/mysql are not affected. This issue has been fixed in version 1.1.1.
A vulnerability exists in the Filippo.io Edwards25519 Go library, specifically in the MultiScalarMult function of the Point structure, in versions prior to 1.1.1. The issue arises because the function fails to properly initialize the receiver point. When called on an initialized point that is not the identity point, MultiScalarMult produces incorrect results. If invoked on an uninitialized point, the behavior is undefined. Notably, if the receiver is the zero value, the function returns an invalid point that is considered equal to every other point. This vulnerability is part of a rarely used advanced API, and users who rely on Filippo.io Edwards25519 solely through the Go SQL Driver MySQL are not affected.
Users can upgrade to version 1.1.1 of the Filippo.io Edwards25519 library, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Feb 19, 2026CISA-ADP
Assessed Feb 20, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/FiloSottile/edwards25519/commit/d1c650afb95fad0742b98d95f2eb2cf031393abb | [email protected] | Source CodeVendor |
| https://github.com/FiloSottile/edwards25519/releases/tag/v1.1.1 | [email protected] | Release NotesVendor |
| https://github.com/FiloSottile/edwards25519/security/advisories/GHSA-fw7p-63qq-7hpr | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-665 | Improper Initialization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| filippo.io/edwards25519 | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 19, 2026 | New CVE Received | [email protected] |