{"id":"CVE-2026-61387","published":"2026-08-04T13:18:55.543","lastModified":"2026-08-05T20:19:16.300","description":"In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a `CreateMonitoredItems` event filter can trigger a `StackOverflowError` during decoding, allowing an unauthenticated remote client to exhaust a finite global monitored-item quota and prevent all clients from creating new monitored items until restart. Existing monitored items and other server functions remain unaffected.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-400","CWE-460","CWE-772"],"vendors":["eclipse"],"products":["milo"],"references":[{"url":"https://github.com/eclipse-milo/milo/commit/587e35669f519b2d7f6d850a5f86ee5a76c3a2c5","tags":["Patch"]},{"url":"https://github.com/eclipse-milo/milo/commit/5f3f6da2a5ea80682e1da7c58f7a1870b09d2b43","tags":["Patch"]},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/182","tags":["Broken Link"]},{"url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598","tags":["Issue Tracking","Vendor Advisory"]}],"exploitRefs":[{"url":"https://github.com/eclipse-milo/milo/commit/587e35669f519b2d7f6d850a5f86ee5a76c3a2c5","tags":["Patch"]},{"url":"https://github.com/eclipse-milo/milo/commit/5f3f6da2a5ea80682e1da7c58f7a1870b09d2b43","tags":["Patch"]}],"hasPoc":true,"ai":{"summary":"The flaw allows an unauthenticated remote client to exhaust monitored-item quotas by triggering a `StackOverflowError` during PubSub ExtensionObject decoding, leading to denial of service for monitored item creation.","exploitability":"Exploitation requires sending deeply nested PubSub ExtensionObjects in a `CreateMonitoredItems` event filter; preconditions include the target running Eclipse Milo version 1.0.0 through 1.1.4.","blast_radius":"If exploited, this could significantly impact server availability by preventing all clients from creating new monitored items until a restart is performed.","remediation":"Upgrade to Eclipse Milo versions later than 1.1.4 or apply vendor patches immediately.","tags":["dos","pubsub","remote-exploit","quota-exhaustion"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:53:36.245Z"}}