{"vulnerability": "CVE-2026-8573", "sightings": [{"uuid": "f03654ec-deae-4a03-b4aa-c4fff83e0a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mltr4me7jg2k", "content": "CVE-2026-8573 - Google Chrome Windows Integer Overflow Sandbox Escape\nCVE ID : CVE-2026-8573\n \n Published : May 14, 2026, 8:17 p.m. | 13\u00a0minutes ago\n \n Description : Integer overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to pot...", "creation_timestamp": "2026-05-14T21:27:58.695121Z"}, {"uuid": "d8c6c1d3-4f54-4dc6-885b-7a416d4185e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8573", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "47b57122-73cf-4db1-92a0-48263528e43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8573", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "35334f4b-831d-4467-b1e1-c99fe189852e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85730", "type": "seen", "source": "https://gist.github.com/alon710/d1e0c342d90c380e5c2e016452073fb0", "content": "# CVE-2026-85730: CVE-2026-85730: Infinite Loop Denial of Service in smol-toml Parser\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-09-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-85730\n\n## Summary\nPrior to version 1.7.1, smol-toml is vulnerable to an infinite loop Denial of Service when parsing a malformed TOML payload containing an unclosed comment inside an array or inline table.\n\n## TL;DR\nA 5-byte malformed TOML payload can block the single-threaded Node.js event loop indefinitely, causing 100% CPU utilization and Denial of Service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **Vulnerability ID**: CVE-2026-85730\n- **CWE ID**: CWE-835 / CWE-606\n- **CVSS v4.0**: 8.2 (High)\n- **Attack Vector**: Network (AV:N)\n- **Exploit Status**: Proof of Concept (PoC)\n- **CISA KEV Listed**: No\n- **Affected Ecosystem**: npm (Node.js)\n\n## Affected Systems\n\n- smol-toml\n- **smol-toml**: < 1.7.1 (Fixed in: `1.7.1`)\n\n## Mitigation\n\n- Upgrade smol-toml dependency to version 1.7.1 or higher.\n- Deploy Web Application Firewall (WAF) filtering to identify malformed TOML comment structures.\n- Set up event loop block detection monitoring within Node.js runtimes.\n\n**Remediation Steps:**\n1. Identify usage of smol-toml in package.json and lockfiles.\n2. Run 'npm install smol-toml@latest' or corresponding command in yarn/pnpm to apply version 1.7.1.\n3. Audit production services to verify event loop response behaviors when exposed to malformed configurations.\n\n## References\n\n- [GitHub Security Advisory GHSA-7w5x-hrqm-74c2](https://github.com/squirrelchat/smol-toml/security/advisories/GHSA-7w5x-hrqm-74c2)\n- [Official Patch Commit](https://github.com/squirrelchat/smol-toml/commit/30f5c367d946b695f379b5d4f0946b2f0a0a8c2f)\n- [v1.7.1 Release Notes](https://github.com/squirrelchat/smol-toml/releases/tag/v1.7.1)\n- [Medium Article by Ravindu Lakmina Munaweera](https://medium.com/@ravindu.lakmina1/seven-bytes-that-freeze-a-node-js-server-forever-the-story-of-cve-2026-85730-3213328b38f0)\n- [NVD Vulnerability Details](https://nvd.nist.gov/vuln/detail/CVE-2026-85730)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-85730) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-09T19:31:51.897413Z"}, {"uuid": "510998be-76bc-474f-9381-57d7adadc8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85730", "type": "published-proof-of-concept", "source": "https://github.com/squirrelchat/smol-toml/security/advisories/GHSA-7w5x-hrqm-74c2", "content": "", "creation_timestamp": "2026-09-09T20:35:03.086071Z"}, {"uuid": "3d9feb6d-624b-426d-9ffb-00e0b11faecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85732", "type": "published-proof-of-concept", "source": "https://github.com/oras-project/oras-go/security/advisories/GHSA-h7vf-4x9w-h99v", "content": "", "creation_timestamp": "2026-09-17T18:35:16.045669Z"}, {"uuid": "4aa4206c-b260-4d45-a8c7-0e8ead7bc478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85731", "type": "published-proof-of-concept", "source": "https://github.com/oras-project/oras-go/security/advisories/GHSA-m37j-52j7-pjw7", "content": "", "creation_timestamp": "2026-09-17T18:35:18.037011Z"}, {"uuid": "59e52d7e-17c0-452c-912f-5685e24f54a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85734", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4qvv4o7g2p", "content": "CVE-2026-85734 - lightrag\nThe LightRAG version before 1.5.5 lets anyone try passwords on the /login page without any slowdown or lockout. This means an attacker can keep guessing until they find a correct\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lightrag #hkuds #CVE #infosec", "creation_timestamp": "2026-09-22T17:30:07.076083Z"}, {"uuid": "1fdae83a-9fae-4c15-8759-550aa9aae384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85734", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4t4gjuc72y", "content": "\ud83d\udea8 CVE-2026-85734 \u2014 CVSS 9.1 CRITICAL\n\nLightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85734\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T18:09:33.817944Z"}, {"uuid": "44c0b58c-8243-41be-95cd-259c6e1eaaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85734", "type": "published-proof-of-concept", "source": "https://github.com/HKUDS/LightRAG/security/advisories/GHSA-frch-4w6v-q5xx", "content": "", "creation_timestamp": "2026-09-22T22:35:18.250872Z"}, {"uuid": "89252ad5-db15-4256-9455-75243b157f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85734", "type": "seen", "source": "https://gist.github.com/alon710/7b1d3264d9c8eccf7d44ef50bef96c32", "content": "# CVE-2026-85734: CVE-2026-85734: Brute-Force and CPU-Exhaustion DoS in LightRAG API /login Endpoint\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-09-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-85734\n\n## Summary\nLightRAG prior to version 1.5.5 does not implement rate limiting, lockout mechanisms, or throttling on its `/login` authentication endpoint. This allows unauthenticated remote attackers to perform rapid brute-force attacks to crack passwords and hijack active sessions. Furthermore, because the endpoint processed synchronous bcrypt verifications inside an asynchronous event loop, concurrent brute-force requests can easily exhaust server CPU resources, triggering an unauthenticated Denial of Service (DoS).\n\n## TL;DR\nUnauthenticated remote attackers can execute high-speed brute-force attacks against LightRAG's /login endpoint to compromise administrative credentials, or concurrently flood the endpoint to exhaust CPU resources and cause a Denial of Service due to a lack of rate limiting and thread-blocking bcrypt executions.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-307: Improper Restriction of Excessive Authentication Attempts\n- **Attack Vector**: Network\n- **CVSS Score**: 9.1 (Critical)\n- **Impact**: Account Takeover and CPU-Exhaustion DoS\n- **Exploit Status**: PoC available, easily automatable\n- **CISA KEV Status**: No\n\n## Affected Systems\n\n- LightRAG API Server\n- **LightRAG**: < 1.5.5 (Fixed in: `1.5.5`)\n\n## Mitigation\n\n- Upgrade LightRAG instances to version 1.5.5 or later.\n- Ensure environment variables LOGIN_MAX_FAILED_ATTEMPTS and LOGIN_LOCKOUT_WINDOW_SECONDS are active and configured with restrictive thresholds.\n- Deploy a reverse proxy (e.g., Nginx, HAProxy) in front of the API server to implement centralized, persistent rate limits.\n- Restrict network access to the API server's login endpoint to authorized IP ranges via firewall rules or VPNs.\n\n**Remediation Steps:**\n1. Identify all deployed LightRAG container or application environments.\n2. Modify the application configuration, or pull the latest container image corresponding to version v1.5.5 or above.\n3. Configure environment variables in your deployment manifest: LOGIN_MAX_FAILED_ATTEMPTS=5 and LOGIN_LOCKOUT_WINDOW_SECONDS=300.\n4. Restart the API server service to apply the rate limiter configurations.\n5. Validate the fix by sending multiple incorrect logins and verifying that HTTP 429 is received on the 6th attempt.\n\n## References\n\n- [GHSA-frch-4w6v-q5xx](https://github.com/HKUDS/LightRAG/security/advisories/GHSA-frch-4w6v-q5xx)\n- [LightRAG Pull Request 3424](https://github.com/HKUDS/LightRAG/pull/3424)\n- [Fix Commit 135bc90](https://github.com/HKUDS/LightRAG/commit/135bc9056e9ecd800c1abe2f2ce24d1a86622a54)\n- [LightRAG Release v1.5.5](https://github.com/HKUDS/LightRAG/releases/tag/v1.5.5)\n- [NVD CVE-2026-85734 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-85734)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-85734) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-23T10:06:23.237822Z"}]}