Radicle Discloses Critical Protocol Vulnerabilities

Radicle disclosed two critical flaws in its node network protocol affecting all released versions. Traffic is unencrypted and unauthenticated, letting anyone on the network path read private repository data, while broken peer authentication allows impersonation of allow-listed Node IDs. Users are told to stop using and seeding private repositories and treat transmitted data as leaked. A breaking fix is under way.