PT-2026-35702 · Apache · Apache Thrift

Hasnain Lakhani

·

CVE-2026-41606

·

Published

2026-04-28

·

Updated

2026-09-01

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0
Description Uncontrolled recursion occurs in Apache Thrift, which can lead to system instability or crashes when the software processes deeply nested data structures.
Recommendations Upgrade to version 0.23.0.

Exploit

Fix

Uncontrolled Recursion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-674CWE-606

Related Identifiers

AZL-85029
BIT-THRIFT-2026-41606
CVE-2026-41606
ECHO-13F5-3EEE-3121
OPENSUSE-SU-2026:10685-1
OPENSUSE-SU-2026:11438-1
OPENSUSE-SU-2026:11661-1
SUSE-SU-2026:3056-1
SUSE-SU-2026:3057-1

Affected Products

Apache Thrift