CVE-2026-54425 | Apache bRPC up to 1.17.x HPACK decoder recursion

October 21, 2026 Yanac

A vulnerability marked as problematic has been reported in Apache bRPC up to 1.17.x. Affected by this vulnerability is an unknown functionality of the component HPACK decoder. Performing a manipulation results in uncontrolled recursion.

This vulnerability was named CVE-2026-54425. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More