CVE-2026-58177

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 10.0.0 through 10.1.3

Description The Cripts framework contains out-of-bounds writes, path traversal, and use-after-free errors. Out-of-bounds writes occur when data is written outside the boundary of a fixed-length block of memory. Path traversal allows access to files and directories outside the intended folder. Use-after-free happens when a program continues to use a pointer after it has been freed.

Recommendations Upgrade to version 10.1.4.