Read the docs
TI-2025-36148 Aliases CVE-2025-58359GHSA-wgq8-vr6r-mqxm

frost-core: refresh shares with smaller min_signers will reduce group security

Priority LOW 27CWE-325Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-269.

Summary

ZF FROST is a Rust implementation of FROST (Flexible Round-Optimised Schnorr Threshold signatures). In versions 2.0.0 through 2.1.0, refresh shares with smaller min_signers will reduce security of group. The inability to change min_signers (i.e. the threshold) with the refresh share functionality (frost_core::keys::refresh module) was not made clear to users. Using a smaller value would not decrease the threshold, and attempts to sign using a smaller threshold would fail. Additionally, after refreshing the shares with a smaller threshold, it would still be possible to sign with the original threshold, potentially causing a security loss to the participant's shares. This issue is fixed in version 2.2.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00305 23rd percentileScored 2026-11-07
Fix Fixed frost (ZcashFoundation): 2.2.0frost-core (crates.io): 2.2.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ZcashFoundationfrost2.0.0 to before 2.2.02.2.0Patch availableCNA
—frost-core (crates.io)2.0.0 to before 2.2.02.2.0Patch availableGHSA-wgq8-vr6r-mqxm
  • frost VendorZcashFoundation Affected 2.0.0 to before 2.2.0 Fixed in 2.2.0 Patch available CNA
  • frost-core (crates.io) Vendor— Affected 2.0.0 to before 2.2.0 Fixed in 2.2.0 Patch available GHSA-wgq8-vr6r-mqxm

Remediation

  • Fix · CNA frost (ZcashFoundation) Fixed in 2.2.0
  • Fix · GHSA-wgq8-vr6r-mqxm frost-core (crates.io) Fixed in 2.2.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-58359
  2. 2026-10-03 Alias added: GHSA-wgq8-vr6r-mqxm

References

Advisory 1

Other 4

  • TI-2026-66079 Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling CVSS 4.0HIGH 8.3
  • TI-2026-37850 ZEBRA: Mempool transaction admission denial via single-peer inbound queue saturation CVSS 3.1MEDIUM 5.3
  • TI-2026-71182 Improper block validation in Zebra gossip lets peers drop new blocks CVSS 4.0MEDIUM 6.3
  • TI-2026-29537 Zebra: addr/addrv2 Deserialization Resource Exhaustion CVSS 4.0MEDIUM 6.3
  • TI-2026-86702 Incomplete cleanup in Zebra lets peers stall initial sync CVSS 4.0HIGH 8.7
  • TI-2026-86701 Quadratic signature hashing in Zcash Zebra enables denial of service CVSS 4.0HIGH 8.7
See all 51 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences