Stack Exhaustion Vulnerability in Unleash Feature Management Platform
CVE-2026-63462
7.5HIGH
What is CVE-2026-63462?
The Unleash Feature Management Platform has a vulnerability that allows an unauthenticated attacker to exploit a flaw in the OpenAPI validation error handling. Attackers can send a deeply nested JSON payload, which leads to stack exhaustion and can terminate the Node process running the service. This exploitation can result in a complete service outage, affecting the availability of the platform. The issue has been addressed in versions 7.5.2, 7.6.5, and 8.0.2.
Affected Version(s)
unleash < 7.5.2 < 7.5.2
unleash >= 7.6.0, < 7.6.5 < 7.6.0, 7.6.5
unleash >= 8.0.0, < 8.0.2 < 8.0.0, 8.0.2