PT-2026-32505 · Nimiq · Core-Rs-Albatross

1Seal · CVE-2026-32605 · Published 2026-04-13 · Updated 2026-04-14

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions nimiq/core-rs-albatross versions prior to 1.3.0

Description An untrusted peer can cause a validator to crash. This occurs when a signed tendermint proposal message is published where the signer is equal to validators.num validators(). The ProposalSender::send() function uses a greater-than operator instead of a greater-than-or-equal-to operator for the signer bounds check. This allows the equality case to proceed to the validators.get validator by slot band(signer) function, which triggers a panic due to an out-of-bounds index before signature verification occurs.

Recommendations Update to version 1.3.0.

Exploit

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

CWE-193

Related Identifiers

CVE-2026-32605

GHSA-G99C-H7J7-RFHV

Affected Products

Core-Rs-Albatross

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32605.json · Exploit
• https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-g99c-h7j7-rfhv · Vendor Advisory
• https://github.com/nimiq/core-rs-albatross/pull/3661 · Patch
• https://github.com/nimiq/core-rs-albatross/commit/9199364b60c7acae4219800d194bbe07d2997b8c · Patch
• https://osv.dev/vulnerability/CVE-2026-32605 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32605 · Security Note
• https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0 · Note
• https://twitter.com/VulmonFeeds/status/2043924151719629268 · Twitter Post
• https://twitter.com/CVEnew/status/2043976212943388883 · Twitter Post
• https://twitter.com/infoflowcloud/status/2043977832439665062 · Twitter Post