{"id":"CVE-2026-75625","title":"Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation","summary":"Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent p…","severity":"critical","cvss":9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-354"],"vendor":"uber","product":"kraken","affected":["kraken <= 0.1.27"],"published":"2026-08-18","updated":"2026-09-24","sourceUpdated":"2026-09-24T20:06:30.133","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-75625","references":[{"url":"https://github.com/uber/kraken","label":"disclosure@vulncheck.com"},{"url":"https://github.com/uber/kraken/blob/master/lib/torrent/storage/agentstorage/torrent.go","label":"disclosure@vulncheck.com"},{"url":"https://github.com/uber/kraken/issues/638","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/kraken-agents-peer-to-peer-download-cache-poisoning-via-digest-verification-bypass","label":"disclosure@vulncheck.com"},{"url":"https://github.com/uber/kraken/issues/638","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.0031,"epssPercentile":0.21242,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-08-18T19:06:07.620370Z"},"ingestedAt":"2026-09-24T15:45:56.701Z","slug":"CVE-2026-75625","body":"## Overview\n\nKraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers can supply substituted content with forged CRC32 corrections that passes per-piece checks, poisoning the cache with attacker-chosen container image layers or manifests that are re-seeded and executed by other hosts.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":62,"depthScoreParts":{"impact":49.5,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}