Denial-of-Service Vulnerability in Perspective by Effective Sourcing
CVE-2026-67198

8.7HIGH

Key Information:

Vendor

Perspective-dev

Status
Perspective
Vendor
CVE Published:
4 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-67198?

Perspective 5.0.0 contains a vulnerability within the VirtualServer protocol dispatcher that could enable remote attackers to execute a denial-of-service attack. This is achieved by sending malformed or incomplete protobuf messages, such as ViewToArrowReq without a defined viewport or MakeTableReq lacking a data field. When these requests trigger unwrap() calls on None values at multiple specific points, the server process may terminate unexpectedly due to a SIGABRT signal, leading to service disruption and potential operational impacts.

Affected Version(s)

perspective 0 <= 5.0.0

References

https://christbowel.com/blog/perspective-5-0-0-five-cves/
technical-descriptionexploit
https://www.vulncheck.com/advisories/perspective-dos-via-...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Christ Bowel Bouchuen
.