CVE-2025-61581

CVE-2025-61581 describes an Inefficient Regular Expression Complexity vulnerability affecting all versions of Apache Traffic Control. This flaw allows authenticated users with access to the Traffic Router management interface to specify malicious patterns, leading to denial-of-service. Rated 7.5 HIGH, the vulnerability has a network attack vector, low attack complexity, and high availability impact. While no active exploitation, public exploit code, or significant community discussion has been observed, users are advised to restrict access to trusted personnel or seek alternative solutions as the project is retired and no fix will be released.