{"id":"EUVD-2026-22160","enisaUuid":"3e53fccb-f850-35b2-9b8e-a4ef2e09cec2","description":"nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. In versions 1.2.2 and below, an unauthenticated p2p peer can cause the RequestMacroChain message handler task to panic. Sending a RequestMacroChain message where the first locator hash on the victim’s main chain is a micro block hash (not a macro block hash) causes said panic. The RequestMacroChain::handle handler selects the locator based only on \"is on main chain\", then calls get_macro_blocks() and panics via .unwrap() when the selected hash is not a macro block (BlockchainError::BlockIsNotMacro). This issue has been fixed in version 1.3.0.","datePublished":"Apr 13, 2026, 11:55:52 PM","dateUpdated":"Apr 14, 2026, 4:28:14 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-48m6-486p-9j8p\nhttps://github.com/nimiq/core-rs-albatross/pull/3660\nhttps://github.com/nimiq/core-rs-albatross/commit/ae6c1e92342e72f80fd12accbe66ee80dd6802ac\nhttps://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0\n","aliases":"CVE-2026-34069\nGHSA-48m6-486p-9j8p\n","assigner":"GitHub_M","epss":0.3,"enisaIdProduct":[{"id":"9fd9801a-3b30-34de-87aa-b25d757e5cf0","product":{"name":"core-rs-albatross","vendor":{"name":"nimiq"}},"product_version":"\u003c 1.3.0"}],"enisaIdVendor":[{"id":"2e2c8f6a-6d1f-3f6e-ac65-db4bf555e05c","vendor":{"name":"nimiq"}}],"enisaIdVulnerability":[{"id":"49e4a7c6-eaff-35f9-bb53-43701d259431","vulnerability":{"id":"CVE-2026-34069","description":"nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. In versions 1.2.2 and below, an unauthenticated p2p peer can cause the RequestMacroChain message handler task to panic. Sending a RequestMacroChain message where the first locator hash on the victim’s main chain is a micro block hash (not a macro block hash) causes said panic. The RequestMacroChain::handle handler selects the locator based only on \"is on main chain\", then calls get_macro_blocks() and panics via .unwrap() when the selected hash is not a macro block (BlockchainError::BlockIsNotMacro). This issue has been fixed in version 1.3.0.","datePublished":"Apr 13, 2026, 11:55:52 PM","dateUpdated":"Apr 14, 2026, 4:28:14 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-48m6-486p-9j8p\nhttps://github.com/nimiq/core-rs-albatross/pull/3660\nhttps://github.com/nimiq/core-rs-albatross/commit/ae6c1e92342e72f80fd12accbe66ee80dd6802ac\nhttps://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0\n","enisa_id":"EUVD-2026-22160\n","assigner":"GitHub_M","epss":0.3,"dataProcessed":"Nov 1, 2026, 7:19:47 AM","vulnerabilityProduct":[{"id":"96d3d209-3d2d-3cec-bdce-b0b9dbd6850e","product":{"name":"core-rs-albatross","vendor":{"name":"nimiq"}},"product_version":"\u003c 1.3.0"}],"vulnerabilityVendor":[{"id":"cd3e6d79-14a1-3a73-a8de-15b20f7c3f45","vendor":{"name":"nimiq"}}]}},{"id":"7b16a332-7571-331b-ab2d-f0a2d49761c6","vulnerability":{"id":"GHSA-48m6-486p-9j8p","description":"nimiq-consensus panics via RequestMacroChain micro-block locator","datePublished":"Apr 13, 2026, 4:36:00 PM","dateUpdated":"Apr 15, 2026, 8:56:41 PM","baseScore":0.0,"references":"https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-48m6-486p-9j8p\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34069\nhttps://github.com/nimiq/core-rs-albatross/pull/3660\nhttps://github.com/nimiq/core-rs-albatross/commit/ae6c1e92342e72f80fd12accbe66ee80dd6802ac\nhttps://github.com/nimiq/core-rs-albatross\nhttps://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0\n","enisa_id":"EUVD-2026-22160\n","aliases":"GHSA-48m6-486p-9j8p\nCVE-2026-34069\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:59:37 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}