Ethereum Foundation's AI Discovers Remote Vulnerability in gossipsub Protocol, CVE-2026-34219

According to CoinDesk, the Ethereum Foundation's security team recently used AI agents to test validator node software and discovered a vulnerability in the gossipsub protocol that can be remotely triggered to crash nodes and take validators offline. The flaw has been patched and registered as CVE-2026-34219.

Researchers emphasized that human verification remains critical to distinguish real vulnerabilities from false positives in the large volume of AI-generated security reports. Protocol security team member Nikos Baxevanis noted that identifying which AI-discovered issues actually exist versus which are plausible "hallucinations" required significant effort.