Product:
CAI Content Credentials
Summary
CAI Content Credentials are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-34678 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted requests to the application, which will consume system resources. This can lead to a denial-of-service condition, making the application unavailable to legitimate users. Since the attack does not require user interaction, it can be executed remotely and silently.
Affected Products
- CAI Content Credentials versions 0.78.2 and 0.7.0 and earlier are vulnerable to resource exhaustion.
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest version of CAI Content Credentials. Additionally, monitoring system resource usage and implementing rate limiting can help prevent exploitation of this issue.