CVE-2026-119542: Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror
Published Oct 30, 2026
·Updated
A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursive parsing to exhaust the Java thread stack and throw an uncaught StackOverflowError. An authenticated user with BULKREAD permission who can submit a cache query may trigger the issue, potentially affecting availability.
Other sources
No public upstream advisory or fix reference is available yet. The Red Hat Data Grid Engineering team has implemented a parser-depth limit for the Ickle query parser, but the fixing commit and the first Red Hat product release containing the fix have not been confirmed. The affected and fixed product versions remain under review.
— Red Hat
Affected Software
0 affected components
Event History
Oct 30, 2026
Data Sourced
via Red Hat·10:21 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·01:54 PM
Data Sourced
via MITRE·01:54 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness