🛡️ CVE-2026-34067 — nimiq-proof-of-stake

🟢 CVSS 3.1 — Low ✅ No Known Exploit CWE-617 NVD

3.1

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

nimiq-transaction: Panic via HistoryTreeProof length mismatch

Impact

HistoryTreeProof::verify panics on a malformed proof where history.len() != positions.len() due to assert_eq!(history.len(), positions.len()).

The proof object is derived from untrusted p2p responses (ResponseTransactionsProof.proof) and is therefore attacker-controlled at the network boundary until validated. A malicious peer could trigger a crash by returning a crafted inclusion proof with a length mismatch.

Patches

[The patch for this vulnerability](https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a) is included as part of [v1.3.0](https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0).

Workarounds

No known workarounds know.

How this vulnerability can be exploited

This issue can be reached over the network, attack complexity is high, an attacker needs no privileges on the target. A user must be tricked into taking some action. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality none, integrity none, availability low.

Affected software

CVE-2026-34067 is recorded against 2 packages.

nimiq-proof-of-stake (fixed in 1.3.0)
nimiq-transaction

Timeline and source

Published on 22 April 2026 and last revised on 17 June 2026. No public exploit is currently recorded for this entry. A vendor advisory or fix has been published. Record sourced from NVD.

References

github.com
github.com
github.com
github.com

Details

Severity LOW

CVSS Score 3.1

CVSS Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE CWE-617

Public Exploit ✅ No

Source NVD

Published 2026-04-22

Updated 2026-08-12

Modified 2026-06-17

Fix URL https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a

Affected Packages

Software	From version	Fixed in
nimiq-proof-of-stake	—	1.3.0
nimiq-transaction	—	—

References

Patch https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a

Issue Tracking, Patch https://github.com/nimiq/core-rs-albatross/pull/3659

Release Notes https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0

Patch, Vendor Advisory https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-264v-m8fm-76jm

🔗 NVD 🔗 Mitre ✅ Fix / Advisory

Similar Threats

More CVE 2026 advisories

Browse all of CVE 2026 in the advisory index.

Free Vulnerability Check

Is your site affected by CVE-2026-34067?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against CVE-2026-34067 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.