CVE-2026-33184

CVE-2026-33184 is a high-severity denial-of-service vulnerability affecting nimiq/core-rs-albatross, a Rust implementation of the Nimiq Proof-of-Stake protocol, in versions prior to 1.3.0. An unauthenticated remote attacker can exploit this by providing a zero-value limit during a handshake, which subsequently triggers a capacity overflow and causes the system to panic. Rated with a CVSS score of 7.5 (High), this vulnerability requires no user interaction or privileges and has low attack complexity, leading to a complete loss of availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion regarding this flaw.