GHSA-rjr4-v43m-pxq6 Triton VM Soundness Vulnerability due to Improper Sampling of Randomness
Malicious provers can craft invalid proofs accepted by the Triton VM verifier, breaking protocol soundness for applications relying on this library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-rjr4-v43m-pxq6?
GHSA-rjr4-v43m-pxq6 is a vulnerability in triton-vm, published on 21 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In affected versions of Triton VM, the verifier failed to correctly sample randomness in the FRI sub-protocol.
Malicious provers can exploit this to craft proofs for arbitrary statements that this verifier accepts as valid, undermining soundness.
Protocols that rely on proofs and the supplied verifier of the affected versions of Triton VM are completely broken. Protocols implementing their own verifier might be unaffected.
The flaw was corrected in commit 3a045d63, where the relevant randomness is sampled correctly.
Which versions are affected by GHSA-rjr4-v43m-pxq6?
3 open source packages ship an affected version, including triton-vm.
| Package | Affected | Fixed in |
|---|---|---|
triton-vm crates.io | From 0.41.0 | 2.0.0 |
triton-vm crates.io | From 0.41.0 | 2.0.0 |
triton-vm crates.io | From 0.41.0 | 2.0.0 |
How do I fix GHSA-rjr4-v43m-pxq6?
Upgrade triton-vm to 2.0.0 or later.
Is GHSA-rjr4-v43m-pxq6 being exploited?
There is no known exploitation of GHSA-rjr4-v43m-pxq6 in the wild and no public exploit code.
Sources
Also known as RUSTSEC-2026-0004.