CVE-2026-116774 | Eugeny russh up to 0.64.x Channel Open Parsing tx.rs ChannelTx::poll_writable maximum_packet_size resource consumption

A vulnerability was found in Eugeny russh up to 0.64.x. It has been declared as problematic. The impacted element is the function ChannelTx::poll_writable of the file russh/src/channels/io/tx.rs of the component Channel Open Parsing. The manipulation of the argument maximum_packet_size results in resource consumption.

This vulnerability is identified as CVE-2026-116774. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More