CVE-2026-91865

Summary

The flaw involves a small WS-Policy document that can cause Neethi to consume excessive CPU and memory during normalization, leading to a denial of service (DoS). This matters because it can disrupt system operations without requiring sophisticated exploitation techniques.

Exploitability

Exploitation is relatively easy as the attack vector relies on specific policy documents; no complex user interaction or advanced privileges are needed.

Blast radius

If exploited, this could significantly impact system availability, affecting multiple services and potentially leading to service disruptions for users.

Prioritized remediation

Upgrade to Neethi version 3.2.4 to address the issue.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.