Net::BitTorrent versions <=2.0.1 use Perl's rand(), a non-cryptographic drand48-class PRNG seeded once per process, to generate the 160-bit Diffie-Hellman private key for the MSE handshake in KeyExchange.pm. The handshake also sends random padding derived from the same PRNG in cleartext immediately after the public key and private key draw. An attacker passively observing the handshake can recover the PRNG state from the cleartext padding, reconstruct the private key, compute the shared secret using the peer's public key, derive the RC4 encryption keys, and decrypt the connection. This defeats the intended obfuscation provided by MSE and exposes the encrypted communication to passive interception.

Confidentiality of the MSE-encrypted BitTorrent connection is compromised. An attacker who passively observes the handshake can decrypt the encrypted traffic by reconstructing the private key and shared secret. There is no impact on integrity or availability reported. The vulnerability allows passive decryption of the connection, undermining the privacy protections of MSE.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should upgrade to Net::BitTorrent version 2.1.0 or later, where this issue is resolved. Until then, avoid using affected versions (<=2.0.1) in environments where confidentiality of BitTorrent traffic is required.