sec_₿sec.21ideas.org
mynode · myNode
Node operators30 October 2026

Update to incident: myNode reports a vulnerability affecting all nodes; patch promised later the same day

myNode publishes a new mitigation: an iptables rule for the node

In addition to the previously announced vulnerability, vendor myNode has released a new mitigation: an iptables rule to run in a Linux terminal on the node itself.

Actions to take

If you run a myNode node, execute the vendor's command in the Linux terminal: sudo iptables -t raw -I PREROUTING -m u32 --u32 "0>>24&0x0F=6:15" -j DROP. The vendor presents this as an additional mitigation, rather than a replacement for those previously named.

Incident history

  1. 30 OctmyNode reports a vulnerability affecting all nodes; patch promised later the same day
  2. 30 OctmyNode publishes a new mitigation: an iptables rule for the node
  3. 31 OctmyNode releases promised patch: v0.3.52 is available