Memory Exhaustion and Stack Overflow Vulnerability in Routinator by NLnet Labs

CVE-2026-72752

What is CVE-2026-72752?

Routinator can experience memory exhaustion when it receives multiple concurrent JSON output requests, which can be exploited by sending numerous connections to its HTTP server. Additionally, the application is susceptible to a stack overflow when processing payloads that are discarded in bulk due to excessive metadata. Users exposing their Routinator HTTP or RTR service to untrusted networks should be particularly cautious, as these vulnerabilities could lead to significant service disruptions.

References