ZeroDay Findings
Sign inSign up

Findings

CVE-2026-41606

Uncontrolled Recursion vulnerability in Apache Thrift.

Published Apr 28, 2026 · updated Sep 9, 2026 · apache thrift

Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 28, 2026 · NIST NVD

    Detected

    Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

  2. Sep 9, 2026 · NIST NVD

    Updated

    Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Affected

  • cpe apache/thriftversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-41606

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-41606

    Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

    nvd.nist.gov

References