{"cve":"CVE-2025-66016","nvd":{"published":"2025-11-25T20:16:00.640","modified":"2026-10-18T20:10:00.110","status":"Deferred","description":"CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key. This issue has been patched in version 0.6.3, for full mitigation it is recommended to upgrade to cggmp24 version 0.7.0-alpha.2 as it contains more security checks.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","score":9.3},"cvss_v3":null,"cwes":["CWE-345"],"references":["https://github.com/LFDT-Lockness/cggmp21/security/advisories/GHSA-m95p-425x-x889","https://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:16:02.354564667+00:00"},"epss":{"cve":"CVE-2025-66016","score":0.00186,"percentile":0.08126,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-m95p-425x-x889","url":"https://osv.dev/vulnerability/GHSA-m95p-425x-x889","summary":"cggmp21 has a missing check in the ZK proof used in CGGMP21","modified":"2025-11-27T09:16:27.373336Z","packages":[{"ecosystem":"crates.io","name":"cggmp21","purl":"pkg:cargo/cggmp21","ranges":["<0.6.3"],"fixed":["0.6.3"]},{"ecosystem":"crates.io","name":"cggmp24","purl":"pkg:cargo/cggmp24","ranges":["<0.7.0-alpha.2"],"fixed":["0.7.0-alpha.2"]}]},{"id":"RUSTSEC-2025-0129","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0129","summary":"Missing check in ZK proof in CGGMP21 Threshold Signing Protocol","modified":"2025-11-26T06:15:27.498116Z","packages":[{"ecosystem":"crates.io","name":"cggmp21","purl":"pkg:cargo/cggmp21","ranges":[">=0.0.0-0 <0.6.3"],"fixed":["0.6.3"]}]},{"id":"RUSTSEC-2025-0130","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0130","summary":"Missing check in ZK proof in CGGMP21 Threshold Signing Protocol","modified":"2025-11-26T06:15:27.507193Z","packages":[{"ecosystem":"crates.io","name":"cggmp24","purl":"pkg:cargo/cggmp24","ranges":[">=0.0.0-0 <0.7.0-alpha.2"],"fixed":["0.7.0-alpha.2"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}