Product:
CAI Content Credentials
Summary
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-34677 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted requests to the application, which will consume system resources. This can lead to a denial-of-service condition, making the application unavailable to legitimate users. Since the attack does not require user interaction, it can be executed remotely and silently.
Affected Products
- CAI Content Credentials versions 0.78.2 and 0.7.0: These versions are vulnerable to resource exhaustion attacks that can lead to application downtime.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of CAI Content Credentials that addresses the resource consumption issue. Regularly monitoring system resources and implementing rate limiting can also help prevent exploitation.