Chia Blockchain RPC 凭证 rpc_server_base.py _authenticate 不正确的身份验证

The vulnerability lies in the authenticate function of rpcserver_base.py, allowing attackers to bypass authentication mechanisms. Successful exploitation could grant an attacker unauthorized access to the Chia Blockchain node, potentially enabling them to control the blockchain, steal funds, or disrupt operations. The high complexity suggests the attack requires specific knowledge of the system and potentially crafted input to bypass authentication checks. While the vendor considers this behavior by design, the potential for misuse remains a significant concern.

Chia Blockchain node operators, particularly those running version 2.1.0 without robust host security measures, are at risk. Shared hosting environments where multiple users share a single Chia Blockchain instance are also particularly vulnerable, as an attacker compromising one user's account could potentially exploit this vulnerability to gain access to the entire node.

• python / server:

import os
import subprocess

def check_rpc_auth():
    try:
        # Attempt to connect to the RPC interface without credentials
        result = subprocess.run(['chia-blockchain', 'rpc', '--help'], capture_output=True, text=True, check=True)
        print("Potential vulnerability: RPC interface accessible without credentials.")
    except subprocess.CalledProcessError as e:
        print(f"RPC interface check failed: {e}")

check_rpc_auth()

• generic web:

curl -I http://<chia_blockchain_ip>:8444/rpc

Examine the response headers for any unusual authentication-related fields.

1. 2026-02-25Disclosure

   disclosure

1. 已保留2026-02-25
2. 发布日期2026-02-25
3. EPSS 更新日期2026-03-23

Due to the lack of a direct patch, mitigation focuses on hardening the host environment. Implement strong firewall rules to restrict access to the Chia Blockchain RPC interface. Regularly review and update access control lists to minimize the attack surface. Consider implementing multi-factor authentication (MFA) for all administrative accounts accessing the Chia Blockchain node. Monitor system logs for suspicious activity related to authentication attempts. While a formal detection signature is unavailable, monitor for unusual RPC requests and authentication failures.