CVE-CVE-2026-72844
Severity
MEDIUM
CVSS Score
6.3
Description
The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::add_inductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their parametric arguments escaped checking. A metaprogram running in the Lean process can register an ill-typed nested inductive whose constructor applies a .proj C 0 projection to a value of the unrelated type W,...
PoCs for CVE-CVE-2026-72844
lean-cve-poc
General
Lean
22
endrazine
2026-08-02