CVE-2026-91095 | Facebook Proxygen 2026.07.20.00 WebTransport Stream onWebTransportBidiStream use after free

A vulnerability was found in Facebook Proxygen 2026.07.20.00 and classified as critical. The impacted element is the function HTTPTransaction::onWebTransportUniStream/HTTPTransaction::onWebTransportBidiStream of the component WebTransport Stream Handler. The manipulation results in use after free.

This vulnerability was named CVE-2026-91095. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More