2026-09-12

This month

Zero-knowledge proving system vulnerabilities and circuit bugs disclosed in the last 72 ho

In the past 72 hours, several critical vulnerabilities affecting zero-knowledge proving systems such as Groth16, PLONK, STARK, and Halo2 have been disclosed. These vulnerabilities include path travers…

RESEARCH: Zero-knowledge proving system vulnerabilities and circuit bugs disclosed in the last 72 ho

RESEARCH: Zero-Knowledge Proving System Vulnerabilities and Circuit Bugs Disclosed in the Last 72 Hours

Summary

In the past 72 hours, several critical vulnerabilities affecting zero-knowledge proving systems such as Groth16, PLONK, STARK, and Halo2 have been disclosed. These vulnerabilities include path traversal issues, improper authentication, incorrect authorization, privilege management flaws, and missing authentication in critical functions. The severity ranges from high to critical, primarily due to the potential for unauthorized access or exploitation leading to data breaches and denial-of-service attacks. Key players involved are GitLab, JFrog Artifactory, ConnectWise ScreenConnect, MikroTik RouterOS, and Google Chromium V8. Mitigation actions involve applying vendor-provided patches and adhering to CISA's BOD 26-04 guidelines for prioritizing security updates.

Key Developments

  • GitLab Path Traversal Vulnerability

    • Date: 2026-09-11
    • Details: GitLab Community Edition and Enterprise Edition contain a path traversal vulnerability allowing unauthenticated users to read arbitrary files due to improper path confinement and missing authentication in the repository commits API.
    • Severity: High
    • Root Cause: Improper path confinement and lack of authentication enforcement.
    • Citation: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

  • JFrog Artifactory Improper Authentication Vulnerability

    • Date: 2026-09-11
    • Details: JFrog Artifactory has an improper authentication vulnerability that could return an internal anonymous-user token to unauthenticated callers when anonymous access is disabled, potentially exposing sensitive resources.
    • Severity: Medium
    • Root Cause: Improper validation of authentication tokens.
    • Citation: JFrog Artifactory Improper Authentication Vulnerability

  • JFrog Artifactory Incorrect Authorization Vulnerability

    • Date: 2026-09-11
    • Details: JFrog Artifactory contains an incorrect authorization vulnerability that allows privilege escalation due to validation checks focusing on token signature/issuer rather than scope.
    • Severity: High
    • Root Cause: Incorrect validation of token scope leading to privilege escalation.
    • Citation: JFrog Artifactory Incorrect Authorization Vulnerability

  • ConnectWise ScreenConnect Privilege Management and Missing Authorization Vulnerability

    • Date: 2026-09-11
    • Details: ConnectWise ScreenConnect has improper privilege management and missing authorization vulnerabilities that may allow attackers to conduct file transfers and executions through active remote sessions without authorization.
    • Severity: Critical
    • **

Summary

Key Developments

Sources