PT-2026-42669 · Git+2 · Core-Rs-Albatross+1

CVE-2026-46539 · Published 2026-05-21 · Updated 2026-06-10

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Nimiq versions prior to 1.4.0

Description A logic flaw in the is block proven() function within BlockInclusionProof allows the function to return true without performing cryptographic verification when get interlink hops returns an empty hop list. This happens when the target block is at the election block position immediately preceding the election head's epoch. Consequently, an attacker providing transaction inclusion proofs can forge a MacroBlock header for that epoch position and have it accepted as proven without any hash or signature verification.

Recommendations Update to version 1.4.0.

Exploit

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2026-46539

GHSA-799F-29JM-GR6C

Affected Products

Core-Rs-Albatross

Nimiq-Primitives

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46539.json · Exploit
• https://osv.dev/vulnerability/GHSA-799f-29jm-gr6c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46539 · Security Note
• https://osv.dev/vulnerability/CVE-2026-46539 · Vendor Advisory
• https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-799f-29jm-gr6c · Note
• https://github.com/nimiq/core-rs-albatross · Note
• https://github.com/nimiq/core-rs-albatross/releases/tag/v1.4.0 · Note
• https://github.com/nimiq/core-rs-albatross/pull/3705 · Note
• https://github.com/nimiq/core-rs-albatross/commit/cc5a1d54bbbffd1ea975bd2ee87d5f7b3b30bbf1 · Note
• https://t.me/CVEtracker/56384 · Telegram Post