CVE-2018-3756: Hyperledger Iroha

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes accept them as separate valid signatures.

Affected products

• Hyperledger Iroha: version 1.0 only; version 1.0.0 only

Published 2018-06-01. Last modified 2026-06-17.