Vulnerability · Published Sep 25, 2026 · Assigned by mitre
CVE-2026-100248
High 8.4
In plain English
A high-severity security flaw in Cosmowarp Contract from Rattadan. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS 4.0)8.4High
Exploit odds (30 days)0.4%top 65.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of current_admin.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rattadan | Cosmowarp Contract | 0 – before 56c6147ee613a6aaa157ecefe2f7bf0ad9084fa8 |
Weakness: CWE-1025 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/AU:Y/R:I/RE:H/U:Red
References
- https://github.com/rattadan/Cosmowarp_Contract/blob/cc75c6f105ddae7627d878365637ebc279f4821d/asset_registry/src/contract.rs#L343
- https://github.com/rattadan/Cosmowarp_Contract/blob/cc75c6f105ddae7627d878365637ebc279f4821d product
- https://github.com/rattadan/Cosmowarp_Contract/commit/56c6147ee613a6aaa157ecefe2f7bf0ad9084fa8 patch