CVE-2026-62333— OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots

Quick assessment

Affected

openvm-org openvm

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenVM 是一个为定制性和可扩展性而设计的高性能、模块化 zkVM（零知识虚拟机）框架。在 1.x 系列的 1.7.0 之前版本，以及受影响的 2.0 和 2.1 预发布版本中，未禁止在等于 0 或更低且不等于 0 的情况下进行 Merkle 扩展行操作。恶意证明者可构造位于内存叶节点下方的子树，并交换该子树内的摘要（digests），从而在无需对应内存操作的情况下篡改已承诺的内存根哈希。这些欺诈性行仍能与 Merkle 总线和压缩总线保持平衡，且对已更改的叶节点无需执行任何内存总线操作。由于内存 Mer

CVSS 8.7 · High Updated Oct 31, 2026

Possible ATT&CK Techniques 2 AI

T1070 · Indicator Removal T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots

Source: CVE Program / CVE List V5

Vulnerability Description

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `MemoryMerkleAir` does not forbid Merkle expansion rows at `parent_height` = 0 or below while `expand_direction` != 0. A malicious prover can fabricate a subtree below a memory leaf and swap digests inside that subtree to change the committed memory root without a corresponding memory operation. The fraudulent rows still balance against the Merkle and compression buses and require no memory-bus operation for the changed leaf. Because the memory Merkle root binds VM memory state across continuation segment boundaries, this affects the soundness of OpenVM proofs using persistent memory. This issue is fixed in versions 1.7.0, 2.0.0-rc.3 and 2.1.0-preview.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

输入验证不恰当

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
openvm-org	openvm	< 1.7.0	-

II. Public POCs for CVE-2026-62333

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-62333

请登录查看更多情报信息。

Other References for CVE-2026-62333 (9)

https://github.com/openvm-org/openvm/pull/148 x_refsource_MISC
https://github.com/openvm-org/openvm/releases/tag/v1.7.0 x_refsource_MISC
https://github.com/openvm-org/openvm/releases/tag/v2.0.0-rc.3 x_refsource_MISC
https://github.com/openvm-org/openvm/releases/tag/v2.1.0-preview x_refsource_MISC
https://github.com/openvm-org/openvm/security/advisories/GHSA-396x-v8w4-9x82 x_refsource_CONFIRM
https://github.com/openvm-org/openvm/commit/bb123f6073691bd2b794171c594264c77e45c376 x_refsource_MISC
https://github.com/openvm-org/openvm/blob/v2.1.0-dev.0/crates/vm/src/system/memory/merkle/air.rs x_refsource_MISC
https://github.com/openvm-org/openvm/blob/v2.0.0-alpha/crates/vm/src/system/memory/merkle/air.rs x_refsource_MISC
https://github.com/openvm-org/openvm/blob/v2.0.0-beta.2/crates/vm/src/system/memory/merkle/air.rs x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-62333

Same Patch Batch · openvm-org · 2026-10-30 · 3 CVEs total

CVE-2026-62334	8.7 HIGH	OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification
CVE-2026-62335	6.9 MEDIUM	OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments

IV. Related Vulnerabilities

Same product: openvm

Same vendor: openvm-org

Same weakness: CWE-20