Plonky3 vulnerabilities

Products

• Plonky3 1

Latest Plonky3 CVEs

Newest publication first

1. CVE-2026-46654 Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss

   Published 2026-06-10

   High·CVSS 8.9 EPSS 0.11%

   Plonky3 is a toolkit for polynomial IOPs (PIOPs). Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side observations can craft distinct transcripts that produce identical challenges, breaking the binding property of Fiat-Shamir. This issue has been patched in ver...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.