Ethereum Foundation: AI Discovers Vulnerability That Could Take Validator Nodes Offline, but Manual Verification Still Required

CoinFeed reported on July 11, according to CoinDesk, the Ethereum Foundation recently disclosed that its security team used an AI agent to test the software running on Ethereum validator nodes and successfully discovered a vulnerability that could be remotely triggered to cause node crashes. However, the researchers emphasized that amid the large number of security reports generated by AI, manual review remains the key step in distinguishing real vulnerabilities from false positives. The vulnerability existed in the Ethereum network's message propagation protocol gossipsub. An attacker could remotely trigger the node software to enter an abnormal computational state, causing the program to crash and shut down, taking the validator node offline until the operator manually restarted it. The vulnerability was subsequently fixed and registered as security vulnerability 'CVE-2026-34219'.