-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0228
============================================================

Advisory-ID:  0xCERT-2026-0228
Severity:     Critical
Published:    2026-04-18T01:14:57.000Z
Updated:      2026-10-08T22:48:28.999Z
Chains:       n/a
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0228

Title: Zebra has rk Identity Point Panic in Transaction Verification

Summary
- -------
Zebra has rk Identity Point Panic in Transaction Verification. Orchard transactions contain a rk field which is a randomized validating key and also an elliptic curve point. The Zcash specification allows the field to be the identity (a "zero" value), however, the orchard crate which is used to verify Orchard proofs would panic when fed a rk with the identity value.

Details
- -------
Summary
Orchard transactions contain a rk field which is a randomized validating key and also an elliptic curve point. The Zcash specification allows the field to be the identity (a "zero" value), however, the orchard crate which is used to verify Orchard proofs would panic when fed a rk with the identity value.

Affected
- - zebrad (rust) < 4.3.1 — fixed in 4.3.1
- - zebra-chain (rust) < 6.0.2 — fixed in 6.0.2

Severity
Critical (CVSS 9.2), as rated by the upstream advisory.

Recommended actions
- - Upgrade zebrad to 4.3.1 or later
- - Upgrade zebra-chain to 6.0.2 or later

Source & attribution
This 0xCERT advisory summarises GHSA-452v-w3gx-72wg / CVE-2026-41584 from the GitHub Advisory Database, credited upstream to conradoplg, mpguerra: https://github.com/advisories/GHSA-452v-w3gx-72wg. Details may change; refer to the original source for the authoritative record.

References
- ----------
- - https://github.com/advisories/GHSA-452v-w3gx-72wg
- - CVE-2026-41584
- - https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-452v-w3gx-72wg
- - https://nvd.nist.gov/vuln/detail/CVE-2026-41584

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrIRtIJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmcUhHh2b6mGdWRgvX2Nw4qljhlBkcehjxAFUy2U
S209QRYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAACh3AEA1FcmN9X3sM522bMg
nu0XVFKJGBbTcvFs5vPcvc2QyWoA/3IBVByLcOl/9lne0FOZmyhjGyjhNPdJ
8k8eL83NahYD
=gGSh
-----END PGP SIGNATURE-----