leanprover CVE debriefs

CVE-2026-72711

A vulnerability in the Lean 4 kernel allows an attacker to submit an opaque declaration with an unbound free variable, potentially leading to type confusion and security issues. The issue arises from the lack of a closure check in the environment::add_opaque function. This vulnerability can be exploited through a metaprogram that manipulates the type checker's inference cache.