Memory Exhaustion Vulnerability in OliveTin by OliveTin

CVE-2026-28342

What is CVE-2026-28342?

The OliveTin application exposes a serious vulnerability through its PasswordHash API endpoint, allowing unauthenticated users to exploit memory allocation processes. Before version 3000.10.2, attackers could send numerous concurrent password hashing requests that overwhelmed the application’s memory resources, potentially causing significant service degradation or even a complete denial of service. This issue arises from a lack of request throttling, authentication checks, and resource management during resource-intensive hashing operations. Users are strongly encouraged to upgrade to version 3000.10.2 to mitigate this risk.

References