CVE-2026-100248
The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of current_admin.
Rattadan Cosmowarp Contract
CVSS
8.4HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.40%Chance of exploitation activity in the next 30 days, higher than 33% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 56c6147ee613a6aaa157ecefe2f7bf0ad9084fa8Cosmowarp ContractCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Affected versions 1
- Cosmowarp Contractaffected: all versions before 56c6147ee613a6aaa157ecefe2f7bf0ad9084fa8CVE List
References 3
- github.com/rattadan/Cosmowarp_Contract/commit/56c6147ee613a6aaa157ecefe2f7bf0ad9084fa8Fixvia CVE List
- github.com/rattadan/Cosmowarp_Contract/blob/cc75c6f105ddae7627d878365637ebc279f4821d/asset_registry/src/contract.rs#L343Referencevia CVE List
- github.com/rattadan/Cosmowarp_Contract/blob/cc75c6f105ddae7627d878365637ebc279f4821dReferencevia CVE List