CVE-2026-62335 Details
Description
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Verifier.verify` accepts `appExeCommit` and `appVmCommit` as `bytes32` values without checking that either is less than the `BN254` scalar field modulus. Although public-value and proof-data lengths are checked, callers can provide non-canonical 256-bit encodings greater than or equal to that modulus at the Solidity wrapper boundary. Applications relying on the wrapper can therefore accept non-canonical app executable and app VM commitments, creating ambiguity between the supplied byte-level values and the field elements used by the verifier. This issue is fixed in versions 1.7.0, 2.0.0-rc.3 and 2.1.0-preview.
A vulnerability exists in the OpenVM zkVM framework, specifically in versions prior to 1.7.0 within the 1.x line, as well as in affected 2.0 and 2.1 prereleases. The issue arises in the OpenVmHalo2Verifier component, where the verify function accepts application executable and VM commitment values as bytes32. It fails to validate that these values are canonical BN254 scalar field elements, allowing non-canonical encodings that could lead to ambiguity in the verification process. This vulnerability is particularly relevant for applications using the Solidity verifier wrapper, as it could create discrepancies between the provided byte values and the actual field elements utilized by the verifier.
Users can upgrade to OpenVM versions 1.7.0, 2.0.0-rc.3, or 2.1.0-preview, all of which include the necessary validation checks for appExeCommit and appVmCommit.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 30, 2026CISA-ADP
Assessed Nov 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| OpenVM | < 1.7.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 6, 2026 | CVE Modified | CISA-ADP |
| Oct 30, 2026 | New CVE Received | [email protected] |