CVE-2026-103472

Summary

The restbed framework is vulnerable to a memory exhaustion attack through WebSocket frames with extremely large payload lengths, allowing unauthenticated remote attackers to cause denial of service by consuming all available server memory.

Exploitability

Exploitation is straightforward for unauthenticated attackers who can establish WebSocket connections, requiring only the ability to send specially crafted frames with large declared payload sizes.

Blast radius

The impact could affect any server running restbed 5.0.0 or earlier with WebSocket endpoints, potentially causing widespread service disruption across applications using this framework.

Detection

Monitor for excessive memory consumption patterns in processes running restbed, particularly when WebSocket connections are active, and watch for sudden increases in memory usage that correlate with incoming WebSocket traffic.

Prioritized remediation

Upgrade to restbed version 5.0.1 or later to address the unbounded stream buffer vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.