Security Vulnerability Discovered in Filecoin Storage Service

A security vulnerability has been identified in the data storage software of the Filecoin project that could lead to server outages. This vulnerability may cause service disruptions by exhausting server resources through repeated large data storage requests. The security vulnerability (CVE-2026-62300) of 'filecoin-pin', registered in the GitHub security advisory database on the 5th, was first disclosed on June 26 and underwent review on GitHub after being registered in the National Vulnerability Database (NVD) on October 30. Filecoin-pin is software that stores data from IPFS, and the issue arises from insufficient limitations on the number of data storage requests, processing capacity, and concurrent operations. If an attacker repeatedly makes large requests, it can excessively utilize the server's storage space, network, CPU, and memory. Servers accessible from the outside are at a higher risk of attack; however, under default settings, external access and unauthenticated use are restricted, making the risk relatively lower. The affected software is filecoin-pin version 1.1.0 and below, and GitHub has rated the severity of this vulnerability at 6.5 out of 10. A patched version 1.1.1 is available, and server operators need to implement additional security measures such as restricting external access and setting up user authentication. As of now, no server outages or damages to the Filecoin network due to actual attacks have been confirmed.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.