Unrated severityNVD Advisory· Published Aug 4, 2026· Updated Aug 4, 2026
Perspective 5.0.0 DoS via Loop Expression Evaluation
CVE-2026-67199
Description
Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs in a TableMakeViewReq message. Attackers can embed an arbitrarily large iteration count in an expression column evaluated once per table row, causing the Tornado IOLoop to block without any iteration cap, deadline, or cancellation check, rendering the server unresponsive to all connected clients.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: =5.0.0
Patches
Vulnerability mechanics
References
2- christbowel.com/blog/perspective-5-0-0-five-cves/mitretechnical-descriptionexploit
- www.vulncheck.com/advisories/perspective-dos-via-loop-expression-evaluationmitrethird-party-advisory
News mentions
0No linked articles in our index yet.