What the developer wrote
Authored by Marko Bencun
bump version
What changed, and why it matters
This commit only bumps the firmware version number from v9.26.0 to v9.26.1 and adds a one-line changelog entry saying 'Fix a payment request validation issue.' The actual code fix is not present in this commit, so we cannot directly assess what the bug was, how severe it is, or how it could be exploited. The changelog wording suggests a security or correctness issue in how payment requests are checked before being approved on the BitBox02 hardware wallet, which could in principle trick a user into authorizing an unintended payment. However, without the patch that fixes the issue, this is mostly speculation.
Treat this as a release marker only. Review the actual code changes that were merged into v9.26.1 (the preceding commits in the release branch or tag) to identify the payment-request validation fix, assess its security impact, and determine whether a CVE or advisory is warranted. Users should upgrade to v9.26.1 once the release is available, but should not rely on this commit alone for a security evaluation.
Security signals we found
Changelog describes a 'payment request validation issue' in a security-critical hardware-wallet component
No actual fix is present in the supplied commit; only version bump and release note
Payment-request validation bugs in hardware wallets can lead to unauthorized/spoofed transaction approval
Insufficient evidence to confirm exploitability, attack vector, or affected protocol
Evidence from the diff
The diff is limited to CHANGELOG.md and versions.json. It records the release of firmware v9.26.1 and notes a single change: ‘Fix a payment request validation issue.’ No source code, no test changes, and no further technical detail are included. The term ‘payment request validation’ in a hardware-wallet context usually refers to verification of payment-request data (e.g., BIP70-style requests, on-device invoice/PoS data, or transaction-output matching) before user confirmation. A validation failure could allow a malicious or buggy request to bypass intended checks, but the commit itself does not show the vulnerable logic or the remediation.
Changed components
BitBox02 firmware payment request validation subsystemCHANGELOG.md / versions.json release metadataInspect captured patch +4 / −1
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b07cf27..5f561e4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,9 @@ customers cannot upgrade their bootloader, its changes are recorded separately.
### [Unreleased]
+### v9.26.1
+- Fix a payment request validation issue
+
### v9.26.0
- Improve experience of moving back and forth when entering password characters
- Ethereum: add data streaming support for transactions and EIP-712 typed messages with large data
diff --git a/versions.json b/versions.json
index 3a07f4d..67dc2cc 100644
--- a/versions.json
+++ b/versions.json
@@ -1,4 +1,4 @@
{
- "firmware": "v9.26.0",
+ "firmware": "v9.26.1",
"bootloader": "v1.1.2"
}
Why this scored 46/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.