Denial of Service Vulnerability in Apache Neethi

CVE-2026-66142

What is CVE-2026-66142?

Apache Neethi is susceptible to a denial of service vulnerability caused by uncontrolled recursion when parsing policies that either lack policy IDs or contain deeply nested structures. This issue can result in runtime memory exhaustion, making the system unresponsive. To protect against this vulnerability, users are strongly advised to upgrade to version 3.2.3, which addresses this flaw.

References