PT-2025-5577 · Unknown · Ismp-Grandpa+1

Seunlanlege · Published 2025-01-28 · Updated 2026-04-13 · CVE-2025-24800

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Hyperbridge versions prior to 15.0.1

Description Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical issue in the ismp-grandpa crate allows a malicious prover to convince the verifier of the finality of arbitrary headers, which could lead to the theft of funds or the compromise of cross-chain applications. This occurs because the verifier only accepts invalid signatures of Grandpa precommits. Specifically, the handleConsensus() function calls IConsensus(host.consensusClient()).verifyConsensus(), where a missing negation check in a conditional statement causes the system to reject valid signatures and accept invalid ones.

Recommendations Update to version 15.0.1.

Exploit

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

CWE-670

Related Identifiers

CVE-2025-24800

GHSA-WWX5-GPGR-VXR7

Affected Products

Hyperbridge

Ismp-Grandpa

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24800.json · Exploit
• https://osv.dev/vulnerability/GHSA-wwx5-gpgr-vxr7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24800 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24800 · Vendor Advisory
• https://github.com/polytope-labs/hyperbridge/pull/372/commits/f0e85db718f5165b06585a49b14a66f8ad643aea · Note
• https://github.com/polytope-labs/hyperbridge/security/advisories/GHSA-wwx5-gpgr-vxr7 · Note
• https://github.com/polytope-labs/hyperbridge · Note
• https://github.com/polytope-labs/ismp-substrate/pull/64/commits/b26894913b301061b07db61af841ca2586415f08#diff-493a6129d75fe31185e28695a4d2adc1582fe9df12462e380fe994f170fc1e70L159 · Note
• https://github.com/polytope-labs/ismp-substrate/pull/64/commits/5ca3351a19151f1a439c30d5cbdbfdc72a11f1a8#diff-3835cc24fb2011b3e8246036059acd8c2c2a9a869eedf7a210d18edb6543318dL262 · Note
• https://github.com/polytope-labs/ismp-substrate/pull/64/commits/04d5be207b082eb61d586d52e1685e2e060347e6#diff-4aedbca82d26bebc03f274e23fd5697c3346ffff54405c87af9018f3aef708b2R1-R160 · Note
• https://t.me/latest_high_impact_cve/1779 · Telegram Post
• https://twitter.com/CVEnew/status/1884267729399472217 · Twitter Post
• https://twitter.com/SystemTek_UK/status/1884538587431010496 · Twitter Post
• https://twitter.com/CveFindCom/status/1884270468900757639 · Twitter Post
• https://twitter.com/Awkiffffff/status/1996911735438180533 · Twitter Post