CVE-2026-76245
Received Received - Intake

Timestamp Validation Flaw in stigmem-node 0.9.0a1

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: VulnCheck

Description
stigmem (pip package stigmem-node) version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly treated as expired. This affects the availability and reliability of authenticated federation flows on nodes using federation peer authentication paths. The issue is fixed in 0.9.0a2, which uses the canonical millisecond-based validation path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-76245
EUVD
EUVD-2026-62409

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
stigmem stigmem to 0.9.0a2 (exc)
eidetic_labs stigmem_node to 0.9.0a2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-345 The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-76245 is a timestamp-handling mismatch in the stigmem-node package (version 0.9.0a1) that causes valid peer tokens to be incorrectly treated as expired during federation authentication. This disrupts authenticated federation flows by making valid tokens appear invalid.

Detection Guidance

Check the installed version of stigmem-node using pip show stigmem-node. If the version is below 0.9.0a2, the system is vulnerable. Review federation peer token validation logs for timestamp-related errors or expired token messages.

Impact Analysis

This vulnerability can lead to denial of service for authenticated federation flows, reducing system availability and reliability. Nodes using peer authentication may fail to validate legitimate tokens, causing disruptions in federated operations.

Compliance Impact

This vulnerability primarily impacts the availability and reliability of authenticated federation flows due to incorrect token expiration handling. While it does not directly violate GDPR or HIPAA, it could indirectly affect compliance by disrupting data access controls or audit logging in federated systems that rely on peer authentication for secure data sharing.

Mitigation Strategies

Upgrade stigmem-node to version 0.9.0a2 or later using pip install --upgrade stigmem-node. Avoid mixed peer-token minting paths and restrict federation to trusted peers until upgraded.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76245. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart