ETK-2026-3264Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-3264",
  "cve_id": null,
  "display_id": "ETK-2026-3264",
  "ghsa_id": "GHSA-8h8f-293m-v3rr",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Algorithmic denial of service in tari_engine authorization",
  "summary": "Affected tari_engine versions can perform access-rule authorization work without charging for effort that grows with rule requirements and live proofs. An unprivileged template author able to submit transactions can consume disproportionate validator CPU capacity, reducing execution availability.",
  "mitigation": "Restrict untrusted template publication and transaction submission where operationally possible until a patched release is available. Update to the vendor-provided fixed release when one is published; deployments maintaining the code should meter authorization traversal or cache proof-set lookups.",
  "vendor": "rust",
  "product": "tari_engine",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 0.47.0"
      ],
      "ecosystem": "rust",
      "fixed_versions": [],
      "package_name": "tari_engine",
      "purl": "pkg:cargo/tari_engine"
    }
  ],
  "cwes": [
    400
  ],
  "cvss_score": 7,
  "cvss_src": "ethiack_provisional",
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 45.9027489,
  "t0_at": null,
  "signals": {
    "public_poc": {
      "at": "2026-11-02T04:51:31+00:00",
      "days": -0.06800486857638889,
      "is_lower_bound": true,
      "measured_at": "2026-11-02T06:29:26.664070+00:00",
      "url": "https://github.com/tari-project/tari-ootle/security/advisories/GHSA-8h8f-293m-v3rr"
    },
    "trigger_signal": {
      "at": "2026-11-02T04:51:31+00:00",
      "days": -0.06800486857638889,
      "is_lower_bound": true,
      "measured_at": "2026-11-02T06:29:26.664070+00:00",
      "url": "https://github.com/tari-project/tari-ootle/security/advisories/GHSA-8h8f-293m-v3rr"
    }
  }
}