CVE-2026-45290

Vulnerability

A vulnerability exists in Cloudburst Network versions prior to 1.0.0.CR3-20260417.085727-30 that affects publicly accessible software relying on these versions. The flaw allows an attacker to stall the netty event loop, rendering the affected component inoperable [1].

Exploitation

An attacker can exploit this vulnerability by interacting with the affected Network component. The exact conditions or specific attack vector are not detailed in the available references, but the outcome is a stall of the netty event loop [1].

Impact

Successful exploitation of this vulnerability can lead to a denial-of-service condition, where the netty event loop is stalled, rendering the affected software inoperable. This impacts publicly accessible software that depends on the vulnerable versions of the Cloudburst Network library [1].

Mitigation

All consumers of the Cloudburst Network library should upgrade to at least version 1.0.0.CR3-20260417.085727-30. For Geyser users, the fix is included in the latest builds (Build #1114+). There are no known workarounds beyond updating the library [1].