Denial of Service Vulnerability in Apache bRPC Affects All Platforms

CVE-2026-82425

What is CVE-2026-82425?

A vulnerability in Apache bRPC allows a remote peer to exploit health check mechanisms, causing the service to crash. This occurs when a Socket with health checking enabled fails and the file descriptor is improperly closed while input events are still being processed. If a malicious actor triggers this flaw through a connection teardown during health check revivals, it can lead to process termination. To mitigate this issue, users should update to bRPC version 1.18.0 or apply the available patch, which ensures seamless handling of revived sockets without crashing the service.

References