CVE Intelligence

Plonky3 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Plonky3 products: 1 record(s), with severity, exploitation and fixes.

Plonky3 1

Exploited only (KEV) →

CVE-2026-46654 High · 8.9 CWE-345 Jun 10, 2026
Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss
Plonky3 is a toolkit for polynomial IOPs (PIOPs). Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side observations can craft distinct transcripts that produce identical challenges, breaking the binding property of Fiat-Shamir. This issue has been patched in versions 0.4.3 and 0.5.3.