Skip to content
CVE PROGRAM SOURCE RECORD8.9 High

CVE-2026-40323

SP1 V6 Recursion Circuit Row-Count Binding Gap

Description

SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. In versions 6.0.0 through 6.0.2, a soundness vulnerability in the SP1 V6 recursive shard verifier allows a malicious prover to construct a recursive proof from a shard proof that the native verifier would reject. Version 6.1.0 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

succinctlabs sp1

  • >= 6.0.0, < 6.1.0affected

References