CVE-2025-69229

CVE-2025-69229 affects AIOHTTP versions 3.13.2 and below, where a flaw in handling chunked HTTP messages can lead to excessive blocking CPU usage. An attacker could exploit this by sending a large number of chunks to an endpoint utilizing request.read(), potentially causing a denial-of-service (DoS) condition as the server becomes unresponsive. The vulnerability has a CVSS score of 5.3 MEDIUM, indicating a low-complexity attack requiring no privileges or user interaction, with a low impact on availability. It is a network-based attack that could degrade server performance. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are minimal, suggesting low public awareness of this vulnerability.