CVE-2026-62335 | openvm-org OpenVM up to 1.6.x Solidity Wrapper OpenVmHalo2Verifier.verify appExeCommit/appVmCommit input validation

October 30, 2026 Yanac

A vulnerability categorized as critical has been discovered in openvm-org OpenVM up to 1.6.x. This vulnerability affects the function OpenVmHalo2Verifier.verify of the component Solidity Wrapper. Executing a manipulation of the argument appExeCommit/appVmCommit can lead to improper input validation.

This vulnerability appears as CVE-2026-62335. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More