CVE-2026-45581 is a vulnerability in fabric-chaincode-java, a Java-based implementation of Hyperledger Fabric chaincode shim APIs. Versions from 2.3.1 to before 2.5.10, when deployed in chaincode-as-a-service mode with TLS enabled, log the TLS private key password in plaintext at the INFO level. An attacker with access to these logs could recover the password and, if they also obtain the TLS private key, [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-05-07T06:16:04.910Z and has not been modified since then. Hyperledger Fabric, an enterprise-grade permissioned distributed ledger framework, is affected by a critical vulnerability. The vulnerability exists in Channel.java, which implements readObject() and exposes deSerializeChannel(). These methods c [truncated]
