TI-2026-68897 CVE-2026-106511 · GHSA-vxx8-8p7v-9mvp
Missing authorization lets MultiversX multisig proposers move funds
Priority HIGH 82
MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allo…