CyberRota Analysis
AI-GeneratedThe vulnerability affects the RubyLLM library, specifically in the `underscore` method, which can be exploited by providing a long, crafted class, agent, or tool name. This leads to excessive CPU consumption, resulting in a denial-of-service condition on systems running Ruby 3.1.x. Organizations utilizing this library should prioritize patching to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x. A very long crafted class, agent, or tool name can cause excessive CPU consumption and a denial of service.