CVE-2026-43871 | Apache Thrift up to 0.23.x TCompactProtocol infinite loop

July 26, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Apache Thrift up to 0.23.x. Affected by this vulnerability is an unknown functionality of the component TCompactProtocol. The manipulation results in infinite loop.

This vulnerability was named CVE-2026-43871. The attack needs to be approached within the local network. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More