CVE-2026-46669

HIGH SEVERITY

CVSS Score & Metrics

Base Score

7.5 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N                                    

Vulnerability Description

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Prior to version 1.6.0, the openvm-pairing guest library's try_honest_pairing_check function invokes Theorem 3 of https://eprint.iacr.org/2024/640.pdf but does not check that the scaling factor s is in a proper subfield of Fp12. This allows incorrect results to the pairing check. This issue has been patched in version 1.6.0.

Vulnerability Details

Published Date

June 10, 2026

Last Modified

June 12, 2026

CWE ID

CWE-20

Source

NVD

Vendor

openvm-org

Product

openvm

External References

https://github.com/openvm-org/openvm/releases/tag/v1.6.0
https://github.com/openvm-org/openvm/security/advisories/GHSA-76mq-v757-53gr

CVE-2026-46669

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment