CVE-2026-54496
A flaw in the ZEBRA Zcash node's variable-base scalar multiplication gadget allowed attackers to create valid proofs with an under-constrained base point, bypassing integrity checks for diversified addresses. The issue affected versions before zebrad 5.0.0, halo2_gadgets 0.5.0, orchard 0.14.0, zcash_primitives 0.28.0, and zcashd 6.20.0. Updating to those versions resolves the vulnerability.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users of ZEBRA/Zcash components prior to the fixed versions.
Real-world impact
An attacker could forge proofs that bypass diversified-address integrity checks, potentially allowing unauthorized spends.
Why this severity
CVSS v3.1 base score 9.3 (Critical) due to network attack vector, low complexity, no privileges or user interaction required, with high integrity impact and low availability impact.
What to do about it
- 01Upgrade zebrad to version 5.0.0 or later.
- 02Upgrade halo2_gadgets to version 0.5.0 or later.
- 03Upgrade orchard to version 0.14.0 or later.
- 04Upgrade zcash_primitives to version 0.28.0 or later.
- 05Upgrade zcashd to version 6.20.0 or later.
Fix information comes directly from the NVD description.