CVE-2026-45291
Deferred Deferred - Pending Action
Denial of Service in Cloudburst Network

Publication date: 2026-06-05

Last updated on: 2026-06-05

Assigner: GitHub, Inc.

Description
Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.0.0.CR3-20260418.124334-32` impacts publicly accessible software depending on the affected versions of Network and allows an attacker to exploit a bug in Network to close the parent netty channel, rendering it inoperable. All consumers of the library should upgrade to at least version `1.0.0.CR3-20260418.124334-32`. There are no known workarounds beyond updating the library.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-05
Last Modified
2026-06-05
Generated
2026-06-27
AI Q&A
2026-06-05
EPSS Evaluated
2026-06-25
NVD
CVE-2026-45291
EUVD
EUVD-2026-34862
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
cloudburst_network network to 1.0.0.CR3-20260418.124334-32 (exc)
geyser geyser From 1117 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

To mitigate this vulnerability, you should upgrade the Cloudburst Network library to at least version 1.0.0.CR3-20260418.124334-32.

If you are using Geyser, update to build #1117 or later.

There are no known workarounds beyond updating the library.

Executive Summary

CVE-2026-45291 is a vulnerability in the Cloudburst Network library affecting versions prior to 1.0.0.CR3-20260418.124334-32. It involves erroneous handling of invalid connections that allows an attacker to exploit a bug to close the parent Netty channel, making it inoperable.

This vulnerability impacts publicly accessible software that depends on the affected versions of the Cloudburst Network library.

Impact Analysis

The vulnerability can cause the parent Netty channel to be closed by an attacker, rendering the network component inoperable.

This results in a denial of service condition, impacting the availability of the affected software.

The attack requires no privileges or user interaction and can be performed remotely over the network with low complexity.

Detection Guidance

There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45291. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart