CyberSecBulletin

Plonky3 vulnerabilities

We track 1 vulnerability in Plonky3 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2026.

1vulnerabilities
0critical
1high
0exploited
8.9average CVSS score

Latest Plonky3 vulnerabilities

  • 8.9 High severity

    Plonky3: Insufficient Verification of Data Authenticity

    CVE-2026-46654Plonky3

    Plonky3 is a toolkit for polynomial IOPs (PIOPs). Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side observations can craft distinct transcripts that produce identical challenges, breaking the binding property of Fiat-Shamir. This issue has