CVE-2026-119131 | Bytecode Alliance Wasmtime up to 48.0.5/49.0.2 wasmtime-wasi-http set-path-with-query denial of service

A vulnerability, which was classified as problematic, has been found in Bytecode Alliance Wasmtime up to 48.0.5/49.0.2. Impacted is the function set-path-with-query of the component wasmtime-wasi-http. This manipulation causes denial of service.

This vulnerability appears as CVE-2026-119131. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More