CVE-2026-45291
Denial of Service in Cloudburst Network
Publication date: 2026-06-05
Last updated on: 2026-06-05
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cloudburst_network | network | to 1.0.0.CR3-20260418.124334-32 (exc) |
| geyser | geyser | From 1117 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, you should upgrade the Cloudburst Network library to at least version 1.0.0.CR3-20260418.124334-32.
If you are using Geyser, update to build #1117 or later.
There are no known workarounds beyond updating the library.
Can you explain this vulnerability to me?
CVE-2026-45291 is a vulnerability in the Cloudburst Network library affecting versions prior to 1.0.0.CR3-20260418.124334-32. It involves erroneous handling of invalid connections that allows an attacker to exploit a bug to close the parent Netty channel, making it inoperable.
This vulnerability impacts publicly accessible software that depends on the affected versions of the Cloudburst Network library.
How can this vulnerability impact me? :
The vulnerability can cause the parent Netty channel to be closed by an attacker, rendering the network component inoperable.
This results in a denial of service condition, impacting the availability of the affected software.
The attack requires no privileges or user interaction and can be performed remotely over the network with low complexity.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.