CVE-2026-54496 Details
Description
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2_gadgets 0.5.0, orchard 0.14.0, zcash_primitives 0.28.0, and zcashd 6.20.0, the variable-base scalar multiplication gadget in halo2_gadgets/src/ecc/chip/mul/incomplete.rs used assign_advice() for the base point without a copy constraint tying it to the actual base, allowing a malicious prover to produce a valid proof for an Orchard Action with an under-constrained base point and bypass the diversified-address-integrity check that binds pk_d, g_d, ivk, the nullifier (nf), and the spend validating key (ak) to the note being spent. This issue is fixed in zebrad 5.0.0, halo2_gadgets 0.5.0, orchard 0.14.0, zcash_primitives 0.28.0, and zcashd 6.20.0.
A soundness vulnerability has been identified in the Zcash Halo 2 proving system, specifically within the variable-base scalar multiplication gadget of the 'halo2_gadgets' crate, prior to version 0.5.0. This vulnerability allowed a malicious prover to create a valid proof for an Orchard Action by exploiting an under-constrained base point. The issue arose because the base point was assigned without a proper constraint, enabling the prover to bypass critical integrity checks and manipulate the proof process. As a result, this flaw could have facilitated double-spending within the Orchard pool, violating balance integrity, or allowed theft of funds by forging spend authorizations for existing notes.
The vulnerability has been fixed in 'zebrad' version 5.0.0, 'halo2_gadgets' version 0.5.0, 'orchard' version 0.14.0, 'zcash_primitives' version 0.28.0, and 'zcashd' version 6.20.0. Zcash node operators should upgrade to version 5.0.0 before the NU6.2 activation height.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 17, 2026CISA-ADP
Assessed Jul 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ZcashFoundation/zebra/releases/tag/v5.0.0 | [email protected] | Release NotesVendor |
| https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-ww9q-8r59-xv46 | [email protected] | AdvisoryBundleRemedyVendor |
| https://github.com/zcash/halo2/releases/tag/halo2_gadgets-0.5.0 | [email protected] | Release NotesVendor |
| https://github.com/zcash/librustzcash/releases/tag/zcash_primitives-0.28.0 | [email protected] | Release NotesVendor |
| https://github.com/zcash/orchard/releases/tag/0.14.0 | [email protected] | Release NotesVendor |
| https://github.com/zcash/zcash/releases/tag/v6.20.0 | [email protected] | Release NotesVendor |
| https://zfnd.org/zebra-4-5-3-and-5-0-0-emergency-soft-fork-and-nu6-2-activation | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-345 | Insufficient Verification of Data Authenticity | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ZcashFoundation Zebra | < 5.0.0 (semver) |
CPE
Remediation
| |
| Zcash halo2_gadgets | < 0.5.0 (semver) |
CPE
Remediation
| |
| Zcash orchard | < 0.14.0 (semver) |
CPE
Remediation
| |
| Zcash zcash_primitives | < 0.28.0 (semver) |
CPE
Remediation
| |
| Zcash zcashd | < 6.20.0 (semver) >= 5.0.0, <= 6.12.3 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 17, 2026 | CVE Modified | CISA-ADP |
| Jul 17, 2026 | New CVE Received | [email protected] |