CVE-2026-67198

7.5 HIGH

Published 2026-08-04 · Updated 2026-08-04

AI risk analysis

Summary: The flaw in Perspective 5.0.0 allows unauthenticated attackers to crash the server by sending malformed protobuf messages, leading to a denial-of-service condition.
Exploitability: Exploitation requires knowledge of the VirtualServer protocol and crafting specific malformed messages; no authentication is needed.
Blast radius: If exploited, it could lead to service disruption affecting all users until the vulnerability is patched.
Prioritized remediation: Update Perspective to a version that addresses this vulnerability or apply vendor-provided patches immediately.

dosprotobufserver-crashunauthenticated

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as ViewToArrowReq with no viewport set or MakeTableReq with no data field to trigger unwrap() calls on None values at nine distinct sites, causing the process to abort with SIGABRT.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-616

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.