CVE-2026-40583

· NIST NVD ↗

UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.

HIGH
CVSS severity
8.2
CVSS base score
2026-04-21
Published

CWE codes

CWE-460CWE-696

Affected products

ultradag:ultradag

Sources