The fix for BGP's weaknesses has big, scary, issues of its own, boffins find

Researchers report that RPKI — intended to secure BGP route origin validation — contains numerous software vulnerabilities, inconsistent specifications, and operational shortcomings. The paper documents a remote code execution issue, warns of possible supply-chain backdoors, and notes that many operators lack automated patching and remain vulnerable, raising the risk that RPKI failures or compromises could enable BGP route hijacking and other large-scale routing problems.