CVE-2026-72844 | Leanprover Lean 4 up to 4.32.1/4.33.0-rc1 Kernel Type Checking src/kernel/inductive.cpp add_inductive type confusion

A vulnerability was found in Leanprover Lean 4 up to 4.32.1/4.33.0-rc1 and classified as problematic. The impacted element is the function environment::add_inductive of the file src/kernel/inductive.cpp of the component Kernel Type Checking. Executing a manipulation can lead to type confusion.

This vulnerability is handled as CVE-2026-72844. It is possible to launch the attack on the local host. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More