CVE-2026-116790

Summary

FreeSWITCH prior to 1.11.2 accepted ICE connectivity checks without verifying the STUN MESSAGE-INTEGRITY attribute, allowing unauthenticated attackers to forge connectivity checks, redirect media streams, and intercept or inject RTP/DTLS traffic on ICE-enabled SIP/WebRTC legs.

Exploitability

Exploitation requires network-level access to the ICE media port and knowledge of the ICE session (e.g., via prior eavesdropping on SDP), but no authentication or user interaction is needed due to missing cryptographic validation.

Blast radius

Attackers can fully compromise media confidentiality and integrity for all ICE-enabled SIP/WebRTC calls, enabling eavesdropping, call termination, or injection of malicious media without detection by legitimate participants.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to FreeSWITCH 1.11.2 or later and ensure ice_verify_message_integrity=true is set in the configuration.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.