{"id":"EUVD-2026-25064","enisaUuid":"36ea8a78-3124-3e14-8af3-57ab6ac46db5","description":"nimiq-blockchain provides persistent block storage for Nimiq\u0027s Rust implementation. Prior to version 1.3.0, `HistoryStore::put_historic_txns` uses an `assert!` to enforce invariants about `HistoricTransaction.block_number` (must be within the macro block being pushed and within the same epoch). During history sync, a peer can influence the `history: \u0026[HistoricTransaction]` input passed into `Blockchain::push_history_sync`, and a malformed history list can violate these invariants and trigger a panic. `extend_history_sync` calls `this.history_store.add_to_history(..)` before comparing the computed history root against the macro block header (`block.history_root()`), so the panic can happen before later rejection checks run. The patch for this vulnerability is included as part of v1.3.0. No known workarounds are available.","datePublished":"Apr 22, 2026, 7:47:49 PM","dateUpdated":"Apr 23, 2026, 12:57:06 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","references":"https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-j99g-7rqw-q9jg\nhttps://github.com/nimiq/core-rs-albatross/pull/3656\nhttps://github.com/nimiq/core-rs-albatross/commit/6f5511309c199d84b012fe6b9aba7e5582892c50\nhttps://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0\n","aliases":"CVE-2026-34066\n","assigner":"GitHub_M","epss":0.24,"enisaIdProduct":[{"id":"4ee78e2a-4716-3c1a-bd6f-78262e994ffd","product":{"name":"nimiq-blockchain","vendor":{"name":"nimiq"}},"product_version":"\u003c 1.3.0"}],"enisaIdVendor":[{"id":"f6f30db7-49ba-3b04-8a43-ff94e50f6f69","vendor":{"name":"nimiq"}}],"enisaIdVulnerability":[{"id":"76f41512-f388-3368-a74a-5e821d6f5910","vulnerability":{"id":"CVE-2026-34066","description":"nimiq-blockchain provides persistent block storage for Nimiq\u0027s Rust implementation. Prior to version 1.3.0, `HistoryStore::put_historic_txns` uses an `assert!` to enforce invariants about `HistoricTransaction.block_number` (must be within the macro block being pushed and within the same epoch). During history sync, a peer can influence the `history: \u0026[HistoricTransaction]` input passed into `Blockchain::push_history_sync`, and a malformed history list can violate these invariants and trigger a panic. `extend_history_sync` calls `this.history_store.add_to_history(..)` before comparing the computed history root against the macro block header (`block.history_root()`), so the panic can happen before later rejection checks run. The patch for this vulnerability is included as part of v1.3.0. No known workarounds are available.","datePublished":"Apr 22, 2026, 7:47:49 PM","dateUpdated":"Apr 23, 2026, 12:57:06 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","references":"https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-j99g-7rqw-q9jg\nhttps://github.com/nimiq/core-rs-albatross/pull/3656\nhttps://github.com/nimiq/core-rs-albatross/commit/6f5511309c199d84b012fe6b9aba7e5582892c50\nhttps://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0\n","enisa_id":"EUVD-2026-25064\n","assigner":"GitHub_M","epss":0.24,"dataProcessed":"Nov 1, 2026, 7:19:47 AM","vulnerabilityProduct":[{"id":"d6a9e224-8336-315c-8370-4d4f2682a139","product":{"name":"nimiq-blockchain","vendor":{"name":"nimiq"}},"product_version":"\u003c 1.3.0"}],"vulnerabilityVendor":[{"id":"1199d49c-905f-3a89-8246-46546b29b07b","vendor":{"name":"nimiq"}}]}},{"id":"844791cb-a00b-3941-8cca-55b4e705526b","vulnerability":{"id":"GHSA-j99g-7rqw-q9jg","description":"nimiq-blockchain: Peer-triggerable panic during history sync","datePublished":"Apr 22, 2026, 7:23:55 PM","dateUpdated":"Apr 27, 2026, 4:22:38 PM","baseScore":0.0,"references":"https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-j99g-7rqw-q9jg\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34066\nhttps://github.com/nimiq/core-rs-albatross/pull/3656\nhttps://github.com/nimiq/core-rs-albatross/commit/6f5511309c199d84b012fe6b9aba7e5582892c50\nhttps://github.com/nimiq/core-rs-albatross\nhttps://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0\n","enisa_id":"EUVD-2026-25064\n","aliases":"CVE-2026-34066\nGHSA-j99g-7rqw-q9jg\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:59:37 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}