CVE-2026-57445highCWE-703

CVE-2026-57445: fallo de gravedad alta en 1Hive gardens-v2

Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve

Publicada el

Seguir esta CVE+ Monitorear gardens-v2

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 0.4%
Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, normal beneficiary payout paths in StreamingEscrow preserve depositAmount() while an active stream needs an escrow reserve. However, the approve-side dispute resolution path drains the whole available escrow balance to the proposal beneficiary. At time of publication, there are no publicly known patches.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
1Hive · gardens-v2
CVEs relacionadas — 1Hive gardens-v2

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-53924HIGHGardens v2: Permissionless syncOutflow bypasses streaming proposal disputesEPSS 0.4%CVE-2026-55658HIGHGardens v2: StreamingEscrow buffer drains to the proposal beneficiary on cancel via the permissionless claim()EPSS 0.3%