CVE-2026-23842

CVE-2026-23842 is a high-severity denial-of-service vulnerability affecting ChatterBot versions up to 1.2.10. It stems from improper database session and connection pool management, allowing concurrent calls to get_response() to exhaust the SQLAlchemy connection pool. This leads to persistent service unavailability, requiring a manual restart for recovery. The vulnerability has a CVSS score of 7.5 (High) and is easily exploitable over the network with low attack complexity and no user interaction. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, with 10 mentions.