OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-94654

HIGH · CVSS 8.2 EPSS 0.41%

Source: NVD + CISA KEV + EPSS · Published 2026-10-02 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

Apache Thrift versions prior to 0.25.0 are vulnerable to an infinite loop condition in the Python bindings, which could lead to denial of service by causing the application to become unresponsive. Organizations utilizing affected versions should prioritize upgrading to 0.25.0 to mitigate the risk of service disruption. This vulnerability is particularly critical for environments relying on Apache Thrift for inter-service communication.

CVE
CVE-2026-94654
Severity
HIGH
CVSS
8.2
EPSS
0.41%
Apache

Original NVD Description

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.