CVE-2026-32129

The record

soroban-poseidon provides Poseidon and Poseidon2 cryptographic hash functions for Soroban smart contracts. Poseidon V1 (PoseidonSponge) accepts variable-length inputs without injective padding. When a caller provides fewer inputs than the sponge rate (inputs.len() < T - 1), unused rate positions are implicitly zero-filled. This allows trivial hash collisions: for any input vector [m1, ..., mk] hashed with a sponge of rate > k, hash([m1, ..., mk]) equals hash([m1, ..., mk, 0]) because both produce identical pre-permutation states. This affects any use of PoseidonSponge or poseidon_hash where the number of inputs is less than T - 1 (e.g., hashing 1 input with T=3). Poseidon2 (Poseidon2Sponge) is not affected.

Affected packages

Related vulnerabilities

• GHSA-g2p6-hh5v-7hfm Poseidon V1 variable-length input collision via implicit zero-padding Same vulnerability
• CVE-2026-41879 R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. CWE-328
• CVE-2026-14738 A security flaw has been discovered in exo-explore exo up to 1.0.71. CWE-328
• CVE-2026-14742 A vulnerability was determined in langchain-ai langgraph up to 1.2.4. CWE-328
• CVE-2026-14630 A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. CWE-328
• CVE-2026-13455 PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to… CWE-328
• CVE-2026-54266 Angular is a development platform for building mobile and desktop web applications using… CWE-328
• GHSA-39pv-4j6c-2g6v @angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to… CWE-328