CVE-2026-40093 - Vulnerability Analysis

Overview

nimiq-blockchain <= 1.3.0 contains a broken access control vulnerability caused by lack of upper bound check on block timestamps, letting malicious block producers inflate monetary supply by setting future timestamps, exploit requires block-producing validator privileges.

Severity & Score

Impact

Malicious validators can inflate the monetary supply, disrupting the emission schedule and economic integrity of the blockchain.

Mitigation

Update to a version later than 1.3.0 where timestamp validation includes upper bound checks.

References

• https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-49xc-52mp-cc9j

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner