lean-cve-poc

CVE-2026-72844: Error de solidez del kernel de Lean 4 Demostrando0 = 1 sin axiomas mediante la evasión de la validación de proyecciones inductivas anidadas. Campo| Valor ---|--- CVE| CVE-2026-72844 Aviso| VulnCheck VCSA Informe de error| leanprover/lean414576 Corrección| leanprover/lean414577...

CVE-2026-72711 Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration With an Unbound Free Variable

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::addopaque omits the checknometavarnofvar call that the definition and theorem paths perform, so a value containing a free variable that is absent from the local context is not rejected outright. A...

CVE-2026-72844 Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...