CyberRota Analysis
AI-GeneratedApache Thrift versions prior to 0.24.0 are vulnerable to a data amplification attack due to improper handling of highly compressed data, which could lead to denial-of-service conditions. Organizations utilizing affected versions in their C++, Java, Python, Go, D, or C/GLib applications should prioritize upgrading to version 0.24.0 to mitigate the risk of exploitation.
CVE
CVE-2026-48586
Severity
HIGH
CVSS
7.5
EPSS
0.63%
Apache Java
Original NVD Description
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)