CyberSecBulletin

Polybase vulnerabilities

We track 1 vulnerability in Polybase products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2026.

1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score

Latest Polybase vulnerabilities

  • 8.7 High severity

    payy: Acceptance of Extraneous Untrusted Data With Trusted Data

    CVE-2026-48100Polybase

    Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, agg_agg forwards the compacted message stream from its inner proofs into a public messages: [Field; 1000] array, but it never checks that the