HackZoneLabs News
Newsletter

CVE-2026-129319

create-ecdh: computeSecret does not validate that the peer public key is on the curve (invalid-curve attack)

  • High 8.2

Description

create-ecdh is a browserifiable implementation of Node.js crypto.createECDH. In versions 4.0.4 and below, the JavaScript implementation (browser.js, used by browser bundlers and on Node.js versions without a working native crypto.createECDH) did not validate peer public keys in ECDH.prototype.computeSecret or ECDH.prototype.setPublicKey. The peer point was multiplied by the local private key without checking that it was on the configured curve or in its prime-order subgroup. An attacker who can submit public keys to a party that reuses a static private key can perform an invalid-curve or small-subgroup attack and recover the private key modulo small factors, eventually recovering the full key via the Chinese Remainder Theorem. For the ed25519 and curve25519 curves, low-order points were also accepted, which could force a predictable shared secret. On modern Node.js, create-ecdh re-exports the native implementation, which is not affected. This issue is fixed in version 4.0.5.

Key facts

Published
14 Nov 2026
Last changed
14 Nov 2026
Assigned by
harborist
EPSS
0.246% likely to be exploited in the next 30 days, higher than 15.991% of CVEs (scores for 15 Nov 2026)

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

  • 8.2CVSS 4.0, Highfrom the CNA (harborist)CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
  • 5.9CVSS 3.1, Mediumfrom the CNA (harborist)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What to do

  • Upgrade create-ecdh to 4.0.5 or later.CNA solution statement

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

No separately sourced impact summary is available on this page yet. Consult the description, version data and dated exploitation evidence.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

VendorProductVersions
browserifycreateECDH
  • Default status: unaffected
  • 0 up to but excluding 4.0.5 (affected)

Timeline

  1. 14 Nov 2026 Published

Weakness

References