Server-side Memory Exhaustion Vulnerability in Checkmate by Bluewave Labs

CVE-2026-55241

What is CVE-2026-55241?

Checkmate, an open-source server monitoring tool, is vulnerable to a server-side memory exhaustion issue due to improper handling of file uploads on the public POST /api/v1/auth/register route. Before version 3.9.1, the application allowed unauthenticated users to submit oversized files without any validation on file size, count, or type. This lack of checks can lead to the system being overwhelmed by memory usage, ultimately causing the backend to crash or become unstable. The vulnerability is resolved in version 3.9.1, and it is crucial for users to update their installations to mitigate potential exploitation.

References