CVE-2026-34824 is an uncontrolled resource consumption vulnerability impacting Mesop framework versions 1.2.3 through 1.2.4. An unauthenticated attacker can exploit this by sending rapid WebSocket messages, forcing the server to spawn unbounded operating system threads, leading to thread exhaustion, Out of Memory errors, and a complete Denial of Service (DoS). Rated 7.5 High on CVSS, this vulnerability has a network attack vector with low complexity and high availability impact. There is no evidence of active exploitation, and no public exploit code is available. Community discussion is minimal, and its EPSS score suggests a very low probability of exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1.2.3, < 1.2.5CPE matchmatch criteria | cpe:2.3:a:mesop-dev:mesop:*:*:*:*:*:python:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.