CVE-2026-102717

Summary

MQTT WebSocket setter ABI mismatch allows memory disclosure or crashes, potentially leading to information leakage or service disruption. This vulnerability affects the way MQTT handles WebSocket connections and can be exploited through improper data handling in the ABI interface.

Exploitability

Exploitation is moderately difficult and requires a crafted MQTT WebSocket connection with specific payload patterns that trigger the ABI mismatch, typically requiring network access to the MQTT broker.

Blast radius

If exploited, this vulnerability could impact all MQTT clients connected through WebSocket, potentially causing widespread service disruption or allowing attackers to read sensitive memory contents from the broker.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.590 or later to address the ABI mismatch in MQTT WebSocket handling.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.