The Rattadan Cosmowarp smart contract before commit 56c6147 contains a CWE-1025 vulnerability where a comparison is made against an unintended value of current_admin. This flaw could lead to incorrect authorization checks or logic errors within the contract. The vulnerability is identified as CVE-2026-100248 with a CVSS 4.0 base score of 8.4, indicating high severity. The affected version is exactly version 0 of the Cosmowarp contract. No vendor advisory or patch information is currently available.

The vulnerability may allow unauthorized or incorrect access control decisions due to the comparison using wrong factors for current_admin. This can lead to potential privilege escalation or unauthorized contract interactions. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability with required privileges being none and remediation level high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with affected versions of the Cosmowarp contract and consider restricting usage or deploying updated contract versions once available.