CVE-2026-120399

Name of the Vulnerable Software and Affected Versions flightctl (affected versions not specified)

Description A flaw exists where the HTTP server performs a TLS handshake synchronously within the connection-context callback without a deadline. This allows a network-reachable unauthenticated client to stall the handshake process, which prevents the affected listener from accepting new connections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.