Chia Blockchain vulnerabilities

Latest Chia Blockchain CVEs

Newest publication first

1. CVE-2026-3194 Chia Blockchain RPC Server Master Passphrase get_private_key missing authentication

   Published 2026-02-25

   Low·CVSS 2.0 EPSS 0.27%

   A flaw has been found in Chia Blockchain 2.1.0. The affected element is the function send_transaction/get_private_key of the component RPC Server Master Passphrase Handler. This manipulation causes missing authentication. The attack can only be executed locally. The attack's comp...

2. CVE-2026-3193 Chia Blockchain send_transaction cross-site request forgery

   Published 2026-02-25

   Low·CVSS 2.3 EPSS 0.25%

   A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /send_transaction. The manipulation results in cross-site request forgery. The attack may be performed from remote. The attack requires a high level of complexity. The exploitabilit...

3. CVE-2026-3192 Chia Blockchain RPC Credential rpc_server_base.py _authenticate improper authentication

   Published 2026-02-25

   Medium·CVSS 6.3 EPSS 0.64%

   A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function _authenticate of the file rpc_server_base.py of the component RPC Credential Handler. The manipulation leads to improper authentication. The attack is possible to be carried out r...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.