CVE-2025-11375

Name of the Vulnerable Software and Affected Versions Consul versions prior to 1.22.0 Consul Enterprise versions prior to 1.22.0 Consul Enterprise version 1.21.6 Consul Enterprise version 1.20.8 Consul Enterprise version 1.18.12

Description The event endpoint in Consul and Consul Enterprise is susceptible to a denial of service (DoS) condition. This is caused by the absence of a maximum value restriction on the Content Length header. A malicious actor could potentially exploit this to disrupt service availability.

Recommendations Update Consul to version 1.22.0 or later. Update Consul Enterprise to version 1.22.0 or later. Update Consul Enterprise to version 1.21.6. Update Consul Enterprise to version 1.20.8. Update Consul Enterprise to version 1.18.12.