CVE-2026-33040 | libp2p rust-libp2p up to 0.49.2 PRUNE u64::MAX integer overflow (GHSA-gc42-3jg7-rxr2)

A vulnerability was found in libp2p rust-libp2p up to 0.49.2. It has been declared as problematic. This affects the function u64::MAX of the component PRUNE Handler. Such manipulation leads to integer overflow.

This vulnerability is traded as CVE-2026-33040. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.