CVE-2025-61770

CVE-2025-61770 is a high-severity denial-of-service vulnerability affecting Rack, a Ruby web server interface, in versions prior to 2.2.19, 3.1.17, and 3.2.2. Attackers can exploit this by sending a large multipart preamble without size limits, causing significant memory consumption and potential process termination due to out-of-memory conditions. The attack is network-based and low complexity, requiring no user interaction, leading to high availability impact. There is currently no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available, though it has received some community discussion and media coverage.