Zebra Node Vulnerabilities Allow CPU Resource Exhaustion Attacks
Article Content
- •Zebra nodes versions 6.3.0 and 6.4.2 are vulnerable to CPU exhaustion attacks.
- •Attackers can exploit malformed transactions without needing valid signatures or funds.
- •Upgrading to zebrad 7.0.0 or later is necessary to mitigate these vulnerabilities.
Two advisories were published regarding vulnerabilities in Zebra nodes, affecting versions 6.3.0 and 6.4.2. The first vulnerability (GHSA-j4cw-58mj-7w6v) allows an attacker to cause significant CPU resource exhaustion by sending a malformed transaction with many inputs, leading to stalled verification processes. The second vulnerability (GHSA-7jp4-mq53-4cvq) allows any connected peer to exploit the coinbase-maturity check, causing similar CPU drain through transactions with numerous transparent inputs and outputs. Both vulnerabilities do not require valid signatures or attacker funds, and the rejection of these transactions does not incur a misbehavior score, allowing repeated attempts. Users are advised to upgrade to zebrad 7.0.0 or later to mitigate these issues. The vulnerabilities were disclosed on November 8, 2026, with no known reported.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
Which versions of Zebra are affected?
What should I do to protect my node?
Is there any active exploitation of these vulnerabilities?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects… 
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…