Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Prior to version 1.6.0, the openvm-pairing guest library's try_honest_pairing_check function invokes Theorem 3 of https://eprint.iacr.org/2024/640.pdf but does not check that the scaling factor s is in a proper subfield of Fp12. This allows incorrect results to the pairing check. This issue has been patched in version 1.6.0.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-18 | 1 | Disclosure1 |
| 2026-07-20 | 1 | Patch1 |
| 2026-07-21 | 1 | Active Exploitation1 |
We pointed zkao, our AI auditor, at OpenVM's zkVM. It found a critical soundness bug in the openvm-pairing guest library. CVE-2026-46669, fixed in 1.6.0. Here's what we learned. 🧵
Post summary
The report announces CVE‑2026‑46669 as a critical soundness flaw in OpenVM’s zkVM, detected by an AI auditor and patched in version 1.6.0.
ZK Security's agent found CVE-2026-46669 after 9.5 hours, once its workflow mapped OpenVM across modules. The bug let malicious provers forge pairing equalities. For AI audits, retrieval structure can matter more than raw context size.
Post summary
ZK Security’s agent discovered CVE-2026-46669 after mapping OpenVM modules, revealing that malicious provers can forge pairing equalities; no PoC, exploit, patch, or active exploitation is noted.
An AI auditor caught a critical bug in an open source zkVM that humans missed for months. zkao found CVE-2026-46669 in OpenVM's openvm-pairing library: - Lets a malicious prover forge any pairing equality - Critical soundness bug in the guest library code - Human team validated and shipped a fix in OpenVM 1.6.0 The first CVE with an LLM as lead author is now in the wild. https://blog.zksecurity.xyz/posts/openvm-bugs/
Post summary
An AI auditor identified CVE‑2026‑46669, a critical soundness bug in OpenVM’s openvm‑pairing library that lets a malicious prover forge any pairing equality. The vulnerability is reported as being exploited in the wild and has a patch released in OpenVM 1.6.0.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openvm | openvm | - | - | - |