Product:
CAI Content Credentials
Summary
CAI Content Credentials are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-34665 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted requests over the network to the affected application. By continuously sending these requests, the attacker can exhaust system resources, leading to a denial-of-service condition. Since the attack does not require user interaction, it can be executed remotely and without any prior access to the system.
Affected Products
- CAI Content Credentials versions 0.78.2 and 0.7.0 and earlier are vulnerable to resource exhaustion.
Mitigation
To mitigate this vulnerability, users should update to the latest version of CAI Content Credentials as soon as it becomes available. Additionally, implementing network security measures to limit the rate of incoming requests can help reduce the risk of exploitation.