Product

org.hyperledger.fabric-sdk-java/fabric-sdk-java vulnerabilities

1 published CVE affecting org.hyperledger.fabric-sdk-java/fabric-sdk-java, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.hyperledger.fabric-sdk-java/fabric-sdk-java CVEs

Newest publication first

CVE-2026-41586 ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE
Published 2026-05-07

CriticalCVSS 9.3 EPSS 0.53%

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26, Channel.java implements readObject() and exposes deSerializeChannel() which call ObjectInputStream.readObject() on untrust...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.hyperledger.fabric-sdk-java/fabric-sdk-java vulnerabilities

Latest org.hyperledger.fabric-sdk-java/fabric-sdk-java CVEs

CVE-2026-41586 ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE