CVE-2026-46369— Nimiq: Validity store off by one error
Quick assessment
Affected
nimiq core-rs-albatross
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Nimiq 是基于 Albatross 共识算法的 Nimiq 权益证明（Proof-of-Stake）协议的 Rust 实现。在版本 1.5.0 及之前，有效性存储使用严格的小于下限比较，导致已存储的交易相对于 过早失效，使得远程攻击者可以在“每批块数减一”的区块窗口期内重放同一笔已签名交易，从而导致发送方和接收方的余额被重复更新（即双重记账）。该问题已在 1.5.1 版本中修复。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-46369
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Nimiq: Validity store off by one error
Source: CVE Program / CVE List V5
Vulnerability Description
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::is_valid_at, allowing a remote attacker to replay the same signed transaction during a blocks_per_batch minus one block window and cause the sender and recipient balances to be updated twice. This issue is fixed in version 1.5.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
Off-by-one错误
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| nimiq | core-rs-albatross | < 1.5.1 | - |
|
II. Public POCs for CVE-2026-46369
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
Qwen3.6-35B-A3B
· 8232 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-46369
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-46369 (2)
Vendor Advisories for CVE-2026-46369 (1)
-
🔗 Validity store off by one error · Advisory · nimiq/core-rs-albatross · GitHub x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: core-rs-albatross
-
CVE-2026-46545
nimiq-primitives: Panic DoS in trie chunk processing via ROO -
CVE-2026-46543
nimiq-blockchain: Genesis batch set request -
CVE-2026-46542
nimiq-keys: Denial of service in Ed25519 multisig delineariz -
CVE-2026-46541
Nimiq network-libp2p: DHT query poisoning via first-record v -
CVE-2026-46540
Nimiq light-blockchain: Light blockchain rebranch issue
Same vendor: nimiq
-
CVE-2026-46545
nimiq-primitives: Panic DoS in trie chunk processing via ROO -
CVE-2026-46543
nimiq-blockchain: Genesis batch set request -
CVE-2026-46542
nimiq-keys: Denial of service in Ed25519 multisig delineariz -
CVE-2026-46541
Nimiq network-libp2p: DHT query poisoning via first-record v -
CVE-2026-46540
Nimiq light-blockchain: Light blockchain rebranch issue
Same weakness: CWE-193
-
CVE-2026-65927
Apache Tomcat: RewriteValve [N] restarts at the second rule -
CVE-2026-79148
Chrome 152.0.7977.65前内存越界漏洞 -
CVE-2026-68767
hashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in -
CVE-2026-66806
Microsoft Office Word Information Disclosure Vulnerability -
CVE-2026-71391
Off-by-One Error in GNU Emacs for Android
V. Comments for CVE-2026-46369
No comments yet