CVE-2026-3230 Improper key_share validation in TLS 1.3 HelloRetryRequest
Attackers can compromise TLS confidentiality by exploiting missing key_share validation in wolfSSL's HelloRetryRequest handling, leading to predictable traffic secrets.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-3230?
CVE-2026-3230 is a low-severity vulnerability in Wolfssl Wolfssl, published on 19 Mar 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communications via a crafted HelloRetryRequest followed by a ServerHello message that omits the required key_share extension, resulting in derivation of predictable traffic secrets from (EC)DHE shared secret. This issue does not affect the client's authentication of the server during TLS handshakes.
Weakness: CWE-20
Which versions are affected by CVE-2026-3230?
It affects 1 product.
Products include Wolfssl Wolfssl.
How do I fix CVE-2026-3230?
Apply the vendor's patch.
Is CVE-2026-3230 being exploited?
There is no known exploitation of CVE-2026-3230 in the wild and no public exploit code.
Other vulnerabilities in Wolfssl Wolfssl
Sources
Also known as DEBIAN-CVE-2026-3230, GHSA-g3xr-5f55-cf5g, JLSEC-2026-704, UBUNTU-CVE-2026-3230.