Medium severity5.3NVD Advisory· Published Apr 28, 2026· Updated Aug 13, 2026
CVE-2026-41606
CVE-2026-41606
Description
Uncontrolled Recursion vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade to version 0.23.0, which fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- osv-coords3 versionspkg:rpm/opensuse/thrift&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/alloy&distro=openSUSE%20Tumbleweedpkg:bitnami/thrift
< 0.23.0-1.1+ 2 more
- (no CPE)range: < 0.23.0-1.1
- (no CPE)range: < 1.18.0-1.1
- (no CPE)range: < 0.23.0
Patches
Vulnerability mechanics
References
12- lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwqlnvdMailing ListPatchRelease Notes
- www.openwall.com/lists/oss-security/2026/04/28/3nvdMailing List
- access.redhat.com/errata/RHSA-2026:14885nvd
- access.redhat.com/errata/RHSA-2026:21769nvd
- access.redhat.com/errata/RHSA-2026:22347nvd
- access.redhat.com/errata/RHSA-2026:22423nvd
- access.redhat.com/errata/RHSA-2026:23345nvd
- access.redhat.com/errata/RHSA-2026:24539nvd
- access.redhat.com/errata/RHSA-2026:36882nvd
- access.redhat.com/security/cve/CVE-2026-41606nvd
- bugzilla.redhat.com/show_bug.cginvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41606.jsonnvd
News mentions
0No linked articles in our index yet.