CVE-2026-78132: Strongswan DOS Vulnerability

CVE-2026-78132 Overview

CVE-2026-78132 is an infinite loop vulnerability in the strongSwan IPsec implementation. The flaw resides in the x509 plugin's attribute certificate parser, specifically in the handling of the ietfAttrSyntax structure. Affected releases include strongSwan versions 5.1.3 through 6.0.7. A remote attacker can trigger the loop by delivering a crafted attribute certificate, causing the affected process to consume CPU resources indefinitely and become unresponsive. The issue is categorized as CWE-835 (Loop with Unreachable Exit Condition). strongSwan addressed the vulnerability in release 6.1.0.

Critical Impact
Remote, unauthenticated attackers can cause a denial of service against strongSwan IPsec daemons by triggering an infinite loop during attribute certificate parsing.

Affected Products

strongSwan 5.1.3 through 5.9.x
strongSwan 6.0.0 through 6.0.7
Deployments using the x509 plugin for attribute certificate processing

Discovery Timeline

2026-09-07 - strongSwan project publishes advisory for CVE-2026-78132
2026-09-11 - CVE-2026-78132 published to the National Vulnerability Database (NVD)
2026-09-14 - Last updated in NVD database

Technical Details for CVE-2026-78132

Vulnerability Analysis

strongSwan is an open-source IPsec-based Virtual Private Network (VPN) implementation used on Linux, Android, and other platforms. The x509 plugin parses X.509 certificates and X.509 attribute certificates used for authorization data during Internet Key Exchange (IKE) negotiations.

The defect resides in the parser for the ietfAttrSyntax ASN.1 structure, which carries IETF attribute values inside attribute certificates. Under specific malformed input, the parser enters a loop whose exit condition is never satisfied. The affected worker thread consumes CPU and stops servicing legitimate IKE traffic, producing a denial-of-service condition on the VPN gateway.

Because the vulnerable code path is reached during certificate parsing, an attacker does not need valid credentials or prior authentication. Delivery of the malicious attribute certificate is sufficient to trigger the loop.

Root Cause

The root cause is an unreachable exit condition ([CWE-835]) in the ASN.1 parsing logic for ietfAttrSyntax values. When a specific malformed sequence is processed, the loop iterator fails to advance past the offending element, and the parser continues to re-evaluate the same input indefinitely.

Attack Vector

The attack vector is network-based and requires no authentication or user interaction. An attacker submits a crafted attribute certificate to a strongSwan endpoint that invokes the x509 plugin's attribute certificate parser. Any strongSwan process that accepts and parses attacker-controlled attribute certificates during IKE authentication or authorization is exposed.

No public proof-of-concept exploit code or exploitation in the wild has been documented for CVE-2026-78132 as of the last NVD update.

Detection Methods for CVE-2026-78132

Indicators of Compromise

Sustained 100% CPU utilization by the charon or charon-systemd IKE daemon without corresponding tunnel activity.
Loss of responsiveness in the strongSwan control interface (swanctl, ipsec statusall) while the process remains running.
IKE_AUTH exchanges from unexpected peers presenting attribute certificates prior to the daemon becoming unresponsive.

Detection Strategies

Inventory hosts running strongSwan and compare installed versions against the vulnerable range 5.1.3 through 6.0.7.
Enable strongSwan debug logging for the cfg and asn subsystems to record attribute certificate parsing events preceding hangs.
Correlate CPU spikes in charon with recent IKE peer connections in security telemetry.

Monitoring Recommendations

Alert on prolonged single-thread CPU saturation in IPsec daemons.
Track failed or dropped IKE_SA_INIT and IKE_AUTH exchanges for anomalies following peer connections.
Monitor VPN gateway availability metrics and restart counts of the strongSwan service.

How to Mitigate CVE-2026-78132

Immediate Actions Required

Upgrade strongSwan to release 6.1.0 or later on all affected gateways and clients.
Restrict IKE listener exposure to trusted peer address ranges where operationally feasible.
Restart the charon daemon after patching to ensure the vulnerable code is no longer loaded.

Patch Information

The strongSwan project fixed CVE-2026-78132 in strongSwan 6.1.0. Refer to the strongSwan advisory for CVE-2026-78132 for backport guidance for the 5.x branch and vendor-supplied packages.

Workarounds

Disable the x509 plugin's attribute certificate handling if attribute certificates are not used for authorization in your deployment.
Enforce peer certificate validation and IP allowlists at the network boundary to limit which peers can present certificates to the parser.
Deploy IKE rate limiting on upstream firewalls to reduce the likelihood of repeated exploitation attempts.

bash

# Verify installed strongSwan version
swanctl --version
ipsec --version

# Example: reload configuration after applying the 6.1.0 upgrade
systemctl restart strongswan
swanctl --load-all