AIKIDO-2025-10362

github.com/cosmwasm/wasmd is vulnerable to Improper Check or Handling of Exceptional Conditions

Improper Check or Handling of Exceptional ConditionsGHSA-79xg-q4qm-7v9w

High Risk

This Affects:

github.com/cosmwasm/wasmd

0.51.0 - 0.53.2

Fixed in 0.53.3

0.54.0 - 0.54.0

Fixed in 0.54.1

0.55.0 - 0.55.0

Fixed in 0.55.1

0.60.0 - 0.60.0

Fixed in 0.60.1

TL;DR

Affected versions of this package may exhibit unexpected behavior due to improper error handling, which can result in an IBC channel being opened even when an error occurs, potentially compromising the expected reliability and integrity of the channel establishment process.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

github.com/cosmwasm/wasmd is vulnerable to Improper Check or Handling of Exceptional Conditions in versions 0.60.0 - 0.60.0, 0.55.0 - 0.55.0, 0.54.0 - 0.54.0 and 0.51.0 - 0.53.2.