CVE-2026-41583 - Vulnerability Analysis
CriticalCVSS: 9.1Last Updated: May 8, 2026
ZEBRA - Consensus Validation Bypass
Published: May 8, 2026Updated: May 8, 2026Remote Exploitable
Overview
ZEBRA prior to zebrad 4.3.1 and zebra-script 5.0.2 contains a consensus validation flaw caused by incorrect sighash hash type validation in V4 and V5 transactions, letting nodes accept invalid blocks causing consensus splits, exploit requires network participation.
Severity & Score
Severity: Critical
CVSS Score: 9.1
Impact
Attackers can cause consensus splits by mining blocks accepted by Zebra but rejected by zcashd, potentially disrupting network integrity.
Mitigation
Upgrade to zebrad 4.3.1 and zebra-script 5.0.2 or later.
Related Resources
Details
- CVE ID
- CVE-2026-41583
- Severity
- Critical
- CVSS Score
- 9.1
- Type
- undefined
- Status
- confirmed
CWE
- CWE-573
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H