core vulnerabilities

2 known vulnerabilities in core from UltraDAGcom. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  core: Improper Access Control

  CVE-2026-42278May 8, 2026UltraDAGcom

  UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation of SmartTransferTx contains a critical logic flaw in its policy enforcement pipeline. When a transaction originates from a "Pocket" (a derived su

• 8.2 High severity

  core: Improper Cleanup on Thrown Exception

  CVE-2026-40583Apr 21, 2026UltraDAGcom

  UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.