CVE Explorer

CVE-2026-34209

mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the tempo/session cooperative close handler validated the close voucher amount using "<" instead of "<=" against the on-chain settled amount. An attacker could submit a close voucher exactly equal to the settled amount, which would be accepted without committing any new funds, effectively closing or griefing the channel for free. This issue has been patched in version 0.4.11.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9e79bee82b3082e9e87a28dc719916101cda68c29d1a22c307234f01664190eb

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"mppx","vendor":"wevm","versions":[{"status":"affected","version":"< 0.4.11"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:47c44d38d328091aa80e30b71363883a4e9360fde345b6a16d6667ea9feaee84 · sha256:d2fe8fe2dc62fabc… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:47c44d38d328091aa80e30b71363883a4e9360fde345b6a16d6667ea9feaee84 · sha256:d2fe8fe2dc62fabc… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-294","description":"CWE-294: Authentication Bypass by Capture-replay","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:47c44d38d328091aa80e30b71363883a4e9360fde345b6a16d6667ea9feaee84 · sha256:d2fe8fe2dc62fabc… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions

{"name":"https://github.com/wevm/mppx/commit/94088246ee18f21b5d6be40d9e7a464f5a280bfb","tags":["x_refsource_MISC"],"url":"https://github.com/wevm/mppx/commit/94088246ee18f21b5d6be40d9e7a464f5a280bfb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:47c44d38d328091aa80e30b71363883a4e9360fde345b6a16d6667ea9feaee84 · sha256:d2fe8fe2dc62fabc… · /containers/cna/references/1

{"name":"https://github.com/wevm/mppx/releases/tag/mppx@0.4.11","tags":["x_refsource_MISC"],"url":"https://github.com/wevm/mppx/releases/tag/mppx@0.4.11"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:47c44d38d328091aa80e30b71363883a4e9360fde345b6a16d6667ea9feaee84 · sha256:d2fe8fe2dc62fabc… · /containers/cna/references/2

{"name":"https://github.com/wevm/mppx/security/advisories/GHSA-mv9j-8jvg-j8mr","tags":["x_refsource_CONFIRM"],"url":"https://github.com/wevm/mppx/security/advisories/GHSA-mv9j-8jvg-j8mr"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:47c44d38d328091aa80e30b71363883a4e9360fde345b6a16d6667ea9feaee84 · sha256:d2fe8fe2dc62fabc… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer