PT-2026-32612 · Sp1 · Sp1

Published 2026-04-14 · Updated 2026-04-18 · CVE-2026-40323

Positive Technologies (AI Summary)

CVSS v4.0

8.9

High

Base vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions SP1 versions 6.0.0 through 6.0.2

Description SP1 is a zero-knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. A soundness issue exists in the SP1 V6 recursive shard verifier, which allows a malicious prover to construct a recursive proof from a shard proof that the native verifier would reject. The problem stems from a missing consistency check in the recursion sub-circuit describing the jagged PCS verifier between two witnesses: the vector of row counts used for commitment binding and the prefix sums used for polynomial evaluation. This allows a prover to supply different trace shapes for commitment and evaluation. This affects both main trace and preprocessed trace metadata, potentially leading to the misrepresentation of the circuit itself, as preprocessed traces encode circuit structure such as selectors, fixed columns, and permutation layout.

Recommendations Update to version 6.1.0.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

CWE-354

Related Identifiers

CVE-2026-40323

GHSA-63X8-X938-VX33

Affected Products

Sp1

References · 8

• https://github.com/succinctlabs/sp1/security/advisories/GHSA-63x8-x938-vx33 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40323 · Security Note
• https://osv.dev/vulnerability/GHSA-63x8-x938-vx33 · Vendor Advisory
• https://github.com/succinctlabs/sp1/releases/tag/v6.1.0 · Note
• https://github.com/succinctlabs/sp1 · Note
• https://reddit.com/r/VulnMatter/comments/1sl97k9/resumen_diario_de_vulnerabilidades_14042026 · Reddit Post
• https://twitter.com/VulmonFeeds/status/2045362999746035744 · Twitter Post
• https://twitter.com/CVEnew/status/2045467368013365391 · Twitter Post