CVE-2026-76244
stigmem-node Insecure Federation Transport Configuration
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are enabled. Operators who explicitly disabled mTLS while binding federation to non-loopback addresses expose federation traffic to cleartext interception and man-in-the-middle attacks.
| CWE | CWE-319 |
| Vendor | eidetic-labs |
| Product | stigmem |
| Published | Aug 19, 2026 |
| Last Updated | Aug 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for eidetic-labs stigmem
Be the first to know when new unknown vulnerabilities affecting eidetic-labs stigmem are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
eidetic-labs / stigmem
0 < 0.9.0a2