System running
Last check: 2026-09-29 00:26:08 | Auto-updates every hour
754 PoCs
CybersecPlayground | The ultimate platform for cybersecurity learning & Bug Bounty Resources

CVE-CVE-2026-72844

Severity
MEDIUM
CVSS Score
6.3
Description

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::add_inductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their parametric arguments escaped checking. A metaprogram running in the Lean process can register an ill-typed nested inductive whose constructor applies a .proj C 0 projection to a value of the unrelated type W,...

PoCs for CVE-CVE-2026-72844

lean-cve-poc
General Lean 22
endrazine 2026-08-02
Master Cybersecurity | Join CybersecPlayground for Cybersecurity Learning & Bug Bounty Resources