CVE-2026-45291

Vulnerability

A vulnerability exists in Cloudburst Network versions prior to 1.0.0.CR3-20260418.124334-32 that affects publicly accessible software relying on these versions. The bug allows an attacker to exploit a flaw in the Network component to close the parent netty channel.

Exploitation

An attacker can exploit this vulnerability by interacting with the affected Network component. The exact conditions or sequence of steps required to trigger the bug and close the parent netty channel are not detailed in the available references, but it impacts publicly accessible software.

Impact

Successful exploitation of this vulnerability allows an attacker to close the parent netty channel, rendering the affected software inoperable. This results in a denial-of-service condition for the application.

Mitigation

All consumers of the Cloudburst Network library should upgrade to at least version 1.0.0.CR3-20260418.124334-32 to address this vulnerability [1]. Geyser users should ensure they are using builds #1117 or later [1]. There are no known workarounds beyond updating the library [1].