As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-72711: Lean 4 kernel soundness bug — inference cache poisoning via opaque declarations (0 = 1 demonstrated)
A soundness bug in Lean 4's kernel, tracked as CVE-2026-72711, allows construction of checked proofs of false propositions like 0 = 1 without axioms or unsafe operations by exploiting a missing closure check in the opaque declaration path. The flaw permits inference cache poisoning and passes kernel verification at maximum checking levels.
Why it matters: Developers and formal verification practitioners using Lean 4 for critical proofs should review affected code, as the vulnerability undermines the kernel's integrity guarantees and compromises the reliability of formally verified systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-72711: Lean 4 kernel soundness bug: inference cache poisoning via opaque declarations (0 = 1 demonstrated)
A soundness bug in Lean 4's kernel, tracked as CVE-2026-72711, allows construction of checked proofs of false propositions like 0 = 1 without axioms or unsafe operations by exploiting a missing closure check in the opaque declaration path. The flaw permits inference cache poisoning and passes kernel verification at maximum checking levels.
Why it matters: Developers and formal verification practitioners using Lean 4 for critical proofs should review affected code, as the vulnerability undermines the kernel's integrity guarantees and compromises the reliability of formally verified systems.
- Source published
- First seen by Cybersecurity Tracker