CVE-2026-46669

Name of the Vulnerable Software and Affected Versions OpenVM versions prior to 1.6.0

Description A soundness issue exists in the openvm-pairing guest library of the OpenVM zkVM framework. The try honest pairing check() function fails to verify that the scaling factor s is within a proper subfield of Fp12. This flaw allows malicious provers to forge pairing equalities, leading to incorrect results during the pairing check.

Recommendations Update OpenVM to version 1.6.0. As a temporary workaround, restrict the use of the try honest pairing check() function in the openvm-pairing library until the update is applied.