CVE-2026-66144

HIGH

7.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2026-07-24

Last Modified2026-07-24

Data SourcesNVD

Vulnerability Description

Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a denial of service attack if a huge policy is retrieved. Users are recommended to upgrade to version 3.2.3, which fixes this issue by imposing a default maximum size on data read from remote policy references.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://lists.apache.org/thread/80xwwbhkqvbwkkmco6yl6fr5xkpdysjf

🔗 http://www.openwall.com/lists/oss-security/2026/07/24/10

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相關漏洞威脅