CVE-2025-66016

The record

CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key. This issue has been patched in version 0.6.3, for full mitigation it is recommended to upgrade to cggmp24 version 0.7.0-alpha.2 as it contains more security checks.

Affected packages

Related vulnerabilities

• RUSTSEC-2025-0130 Missing check in ZK proof in CGGMP21 Threshold Signing Protocol Same vulnerability
• CVE-2025-66017 CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3… Also affects cggmp21
• RUSTSEC-2025-0128 CGGMP21 presignatures can be used in the way that significantly reduces security Also affects cggmp21
• CVE-2026-102682 Pipecat is an open-source Python framework for building real-time voice and multimodal… CWE-345
• CVE-2026-104850 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and… CWE-345
• CVE-2026-102275 PyJWT is a Python implementation of JSON Web Token standards. CWE-345
• CVE-2026-102267 PyJWT is a Python implementation of JSON Web Token standards. CWE-345
• CVE-2026-19941 An inapplicable NSEC record may be accepted by a `named` resolver as proof that no… CWE-345