high8.2
CVE-2026-40583
UltraDAG is a minimal DAG-BFT blockchain in Rust.
Impact
UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ultradag | Ultradag | Version 0.1.0 |