Anchor: Program<'info, System> is not properly validated

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-45137 · Microsoft / collected KEV context

EUVD-2026-32665

GHSA-c6rc-8jpp-2fgc

RUSTSEC-2026-0144

cve-program · CVE-2026-45137

• https://github.com/otter-sec/anchor/security/advisories/GHSA-c6rc-8jpp-2fgc

euvd · EUVD-2026-32665

• https://github.com/otter-sec/anchor/security/advisories/GHSA-c6rc-8jpp-2fgc

nvd · CVE-2026-45137

• https://github.com/otter-sec/anchor/security/advisories/GHSA-c6rc-8jpp-2fgc

osv · GHSA-c6rc-8jpp-2fgc

• https://github.com/otter-sec/anchor/security/advisories/GHSA-c6rc-8jpp-2fgc
• https://github.com/solana-foundation/anchor/security/advisories/GHSA-c6rc-8jpp-2fgc
• https://nvd.nist.gov/vuln/detail/CVE-2026-45137
• https://github.com/solana-foundation/anchor
• https://github.com/solana-foundation/anchor/releases/tag/v1.0.2
• https://rustsec.org/advisories/RUSTSEC-2026-0144.html

osv · RUSTSEC-2026-0144

• https://crates.io/crates/anchor-lang
• https://rustsec.org/advisories/RUSTSEC-2026-0144.html
• https://github.com/solana-foundation/anchor/commit/3eb1fb0427d4fed0e944b627aef76db651a93aab
• https://github.com/solana-foundation/anchor/releases/tag/v1.0.2

No related operational record is retained in the current change model.