Unauthenticated Denial-of-Service Vulnerability in Podgrab by Podgrab Inc.

CVE-2026-104057

What is CVE-2026-104057?

Podgrab has a vulnerability that allows unauthenticated users to trigger a denial-of-service condition. This arises from unsynchronized access to shared maps within the application's WebSocket handler. By opening multiple WebSocket connections and sending messages rapidly to the /ws endpoint, an attacker can induce a data race in the Go runtime, leading to a crash of the process. As a result, service disruptions can occur, necessitating manual intervention from operators to restore normal functionality.

References