PT-2026-111808 · Git+1 · Misskey
CVE-2026-103937
·
Published
2026-10-13
·
Updated
2026-10-13
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Misskey versions 13.0.0 through 2025.4.1
Misskey versions 2025.5.0 through 2026.6.9
Description
Cleanup processing may fail to execute during file uploads. This can lead to the exhaustion of storage or file descriptors through repeated uploads, resulting in a denial of service, regardless of whether federation is enabled.
Recommendations
Update Misskey versions 13.0.0 through 2025.4.1 to version 2026.7.0.
Update Misskey versions 2025.5.0 through 2026.6.9 to version 2026.7.0.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Misskey