-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0289
============================================================

Advisory-ID:  0xCERT-2026-0289
Severity:     High
Published:    2026-10-30T20:17:12.493Z
Updated:      2026-10-31T00:08:07.360Z
Chains:       n/a
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0289

Title: CVE-2026-62334: OpenVM

Summary
- -------
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Verifier.verify` constructs raw proof calldata from user-controlled `proofData`, performs a `staticcall` to `address(this)`, and treats a successful call as proof acceptance. If the first four proof bytes match another external selector exposed by the wrapper, dispatch can invoke a successful non-verifier function instead of the generated Halo2 fallback verifier. Applications using the generated Solidity wrapper can cons…

Details
- -------
Summary
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Verifier.verify` constructs raw proof calldata from user-controlled `proofData`, performs a `staticcall` to `address(this)`, and treats a successful call as proof acceptance. If the first four proof bytes match another external selector exposed by the wrapper, dispatch can invoke a successful non-verifier function instead of the generated Halo2 fallback verifier. Applications using the generated Solidity wrapper can consequently accept arbitrary app commitments and public values without checking the proof suffix, accumulator, app commitments or public values. This issue is fixed in versions 1.7.0, 2.0.0-rc.3 and 2.1.0-preview.

Severity
High (CVSS 8.7), as scored by NVD.

Weakness
- - CWE-754

Recommended actions
- - Check whether you run or depend on the affected component and version
- - Apply the vendor's fix or mitigation from the references below

Source & attribution
This 0xCERT advisory summarises CVE-2026-62334 from the U.S. National Vulnerability Database: https://nvd.nist.gov/vuln/detail/CVE-2026-62334. Details may change; refer to the original source for the authoritative record.

References
- ----------
- - https://nvd.nist.gov/vuln/detail/CVE-2026-62334
- - https://github.com/openvm-org/openvm/blob/v2.0.0-alpha/crates/sdk/contracts/template/OpenVmHalo2Verifier.sol
- - https://github.com/openvm-org/openvm/blob/v2.0.0-beta.2/crates/sdk/contracts/template/OpenVmHalo2Verifier.sol
- - https://github.com/openvm-org/openvm/blob/v2.1.0-dev.0/crates/sdk/contracts/template/OpenVmHalo2Verifier.sol
- - https://github.com/openvm-org/openvm/commit/751bdb1725254c3268782ddf8df89f19035666e3
- - https://github.com/openvm-org/openvm/pull/151
- - https://github.com/openvm-org/openvm/releases/tag/v1.7.0
- - https://github.com/openvm-org/openvm/releases/tag/v2.0.0-rc.3
- - https://github.com/openvm-org/openvm/releases/tag/v2.1.0-preview

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmroItcJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmfjWsbxD3uJFmzbb+mSoTeTYmOSiYiURpSAxcKJ
EiAq/hYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAAITwEA86G4o4uXmXrTEtcI
H3I1dXDF/F1z705Ri3mEHENbe1YA/0fy30wOXWfzlzCvgYIa2+LwGYHz3V2x
D4IdjN2jYDoD
=Kiee
-----END PGP SIGNATURE-----