CVE-2026-52733

ZEBRA (Zcash node, Rust) versions up to v4.4.1 are affected by a state corruption bug. During a chain fork, Chain::pop_tip removes the reverted tip block but fails to clean up associated Sapling and Orchard note-commitment subtree root entries, unlike pop_root. When the winning fork finalizes, th...