CVE-2025-58359 Details
Description
ZF FROST is a Rust implementation of FROST (Flexible Round-Optimised Schnorr Threshold signatures). In versions 2.0.0 through 2.1.0, refresh shares with smaller min_signers will reduce security of group. The inability to change min_signers (i.e. the threshold) with the refresh share functionality (frost_core::keys::refresh module) was not made clear to users. Using a smaller value would not decrease the threshold, and attempts to sign using a smaller threshold would fail. Additionally, after refreshing the shares with a smaller threshold, it would still be possible to sign with the original threshold, potentially causing a security loss to the participant's shares. This issue is fixed in version 2.2.0.
A vulnerability exists in the Zcash Foundation FROST library, specifically in the refresh share functionality of the 'frost_core::keys::refresh' module', in versions 2.0.0 prior to 2.2.0. The issue arises from the lack of validation for the 'min_signers' parameter, which determines the signing threshold. Users were not informed that reducing this parameter could compromise the security of the group. While attempts to sign with a lower threshold would fail, it remained possible to sign with the original threshold, potentially leading to a security loss for the participant's shares. This vulnerability has been addressed in version 2.2.0, which includes the necessary validation for the 'min_signers' parameter.
Users should update to version 2.2.0, which includes validation for the 'min_signers' parameter. However, for groups that have been refreshed with a smaller 'min_signers' value, it is strongly recommended to migrate to a new key.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 5, 2025CISA-ADP
Assessed Sep 5, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ZcashFoundation/frost/commit/379ef689c733b3d9c80fd409071d4f3af4dafed2 | [email protected] | Source CodeVendor |
| https://github.com/ZcashFoundation/frost/releases/tag/frost-core%2Fv2.2.0 | [email protected] | Release NotesVendor |
| https://github.com/ZcashFoundation/frost/security/advisories/GHSA-wgq8-vr6r-mqxm | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-325 | Missing Cryptographic Step | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ZF FROST | All versions |
CPE
Remediation
| |
| ZF frost-core | All versions |
CPE
Remediation
| |
| ZF frost-ed25519 | All versions |
CPE
Remediation
| |
| ZF frost-ed448 | All versions |
CPE
Remediation
| |
| ZF frost-p256 | All versions |
CPE
Remediation
| |
| ZF frost-rerandomized | All versions |
CPE
Remediation
| |
| ZF frost-ristretto255 | All versions |
CPE
Remediation
| |
| ZF frost-secp256k1-tr | All versions |
CPE
Remediation
| |
| ZF frost-secp256k1 | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Sep 5, 2025 | New CVE Received | [email protected] |