{
  "id": 9349898,
  "title": "Critical security vulnerabilities in the Radicle network protocol",
  "url": "https://urgent.news/2026/09/23/critical-security-vulnerabilities-in-the-radicle-network-protocol",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-23T14:20:46.000Z",
  "source": {
    "name": "LWN",
    "slug": "lwn",
    "url": "https://lwn.net/Articles/1096200/"
  },
  "original_language": "en",
  "account": "Radicle, a peer-to-peer code-collaboration project, has revealed two critical vulnerabilities in its network protocol. The first flaw allows the lack of confidentiality, which enables any observer to read the data exchanged between two nodes. The second issue stems from broken peer authentication, allowing attackers to impersonate Node IDs and gain access to private repositories they should not be able to read. When these two flaws are combined, an attacker in the network path can not only read the exchanged data but also fetch the entire repository using a Node ID they have observed. The real threat lies in anyone on the path between your node and its syncing node, and no setting or allow-list can provide protection against this. The disclosure comes before a security update, urging immediate action since no fix can undo past exposures. Workarounds are available for immediate use, while a major update is being prepared that will be backward-incompatible.",
  "summary": "The Radicle peer-to-peer code-collaboration project has disclosed two critical vulnerabilities in the network protocol used by Radicle nodes. The first flaw is that the network protocol used by Radicle \" does not give the confidentiality it was expected to give \", which allows anyone who can observe the network between two nodes to read the data exchanged. The second is that peer authentication…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "Lobsters",
        "title": "Radicle: Disclosure of Vulnerability in the Network Protocol",
        "url": "https://urgent.news/2026/09/23/radicle-disclosure-of-vulnerability-in-the-network-protocol",
        "published": "2026-09-23T14:34:37.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}