Vulnerability · Published Nov 25, 2025 · Assigned by GitHub_M
CVE-2025-66016CGGMP24 is missing a check in the ZK proof used in CGGMP21
Critical 9.3
In plain English
A critical-severity insufficient verification of data authenticity in cggmp21 from LFDT-Lockness. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Official description
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key. This issue has been patched in version 0.6.3, for full mitigation it is recommended to upgrade to cggmp24 version 0.7.0-alpha.2 as it contains more security checks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| LFDT-Lockness | cggmp21 | < 0.6.3 |
Weakness: CWE-345 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N