CVE-2026-123356 | grobidOrg Grobid up to 0.9.0 Training Endpoint GrobidRestProcessTraining.java GrobidRestProcessTraining.trainModel resource consumption

A vulnerability marked as problematic has been reported in grobidOrg Grobid up to 0.9.0. Affected is the function GrobidRestProcessTraining.trainModel of the file GrobidRestProcessTraining.java of the component Training Endpoint. This manipulation causes resource consumption.

The identification of this vulnerability is CVE-2026-123356. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More