FreeBSD-SA-26:52 – Missing WireGuard MAC Validation (CVE-2026-58085)
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
FreeBSD has issued security advisory FreeBSD-SA-26:52 (CVE-2026-58085) for a flaw in the wg(4) WireGuard kernel driver, where the driver did not check whether the Poly1305 MAC verification succeeded after an OpenCrypto decrypt, so packets with invalid authentication tags were silently accepted.