Denial of Service Vulnerability in Perspective by Researcher
CVE-2026-67199

7.1HIGH

Key Information:

Vendor

Perspective-dev

Status
Perspective
Vendor
CVE Published:
4 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-67199?

Perspective 5.0.0 contains a vulnerability that enables remote attackers to exploit crafted expressions with unbounded loop constructs. When an attacker submits a TableMakeViewReq message with a large iteration count in an expression, it can cause the Tornado IOLoop to block indefinitely. This situation leads to server unresponsiveness for all clients due to the absence of iteration caps or cancellation checks, making it critical for affected users to implement necessary mitigations.

Affected Version(s)

perspective 0 <= 5.0.0

References

https://christbowel.com/blog/perspective-5-0-0-five-cves/
technical-descriptionexploit
https://www.vulncheck.com/advisories/perspective-dos-via-...
third-party-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Christ Bowel Bouchuen
.