CVE-2025-58359 frost-core: refresh shares with smaller min_signers will reduce group security
Incorrect handling of threshold updates in FROST key refresh allows attackers to reduce group security and bypass intended signing thresholds.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-58359?
CVE-2025-58359 is a medium-severity vulnerability in ZcashFoundation frost, published on 4 Sep 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
ZF FROST is a Rust implementation of FROST (Flexible Round-Optimised Schnorr Threshold signatures). In versions 2.0.0 through 2.1.0, refresh shares with smaller min_signers will reduce security of group. The inability to change min_signers (i.e. the threshold) with the refresh share functionality (frost_core::keys::refresh module) was not made clear to users. Using a smaller value would not decrease the threshold, and attempts to sign using a smaller threshold would fail. Additionally, after refreshing the shares with a smaller threshold, it would still be possible to sign with the original threshold, potentially causing a security loss to the participant's shares. This issue is fixed in version 2.2.0.
Weakness: CWE-325
Which versions are affected by CVE-2025-58359?
2 open source packages ship an affected version, including frost-core.
| Package | Affected | Fixed in |
|---|---|---|
frost-core crates.io | From 2.0.0 | 2.2.0 |
frost-core crates.io | From 2.0.0 | 2.2.0 |
How do I fix CVE-2025-58359?
Upgrade frost-core to 2.2.0 or later.
Is CVE-2025-58359 being exploited?
There is no known exploitation of CVE-2025-58359 in the wild and no public exploit code.
Sources
Also known as GHSA-wgq8-vr6r-mqxm.