Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack". Upgrade to v3.1.0 or later.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 Github GHSA |
GHSA-9f3f-wv7r-qc8r | Pion DTLS's usage of random nonce generation with AES GCM ciphers risks leaking the authentication key |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 11 Feb 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack". Upgrade to v3.1.0 or later. | |
| Title | Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key | |
| Weaknesses | CWE-200 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2026-02-11T21:07:50.187Z
Reserved: 2026-02-09T21:36:29.554Z
Link: CVE-2026-26014
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-02-11T21:16:21.257
Modified: 2026-02-11T21:16:21.257
Link: CVE-2026-26014
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses