CVE-2015-20112: Ethereum Rlpx

Low severity, CVSS 3.4. EPSS: 0.2% chance of exploitation in the next 30 days.

RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network.

Affected products

• Ethereum Rlpx: version 5 only

Published 2025-06-29. Last modified 2026-06-17.