CVE-2026-121824: Security vulnerability

Published Nov 6, 2026

Updated

A vulnerability has been identified in armeria versions prior to 1.43.0, where processing malformed Thrift messages can cause excessive memory allocation, potentially resulting in denial of service.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade armeria to a version that resolves this vulnerability.
Fixed in 1.43.0

Event History

Nov 6, 2026

CVE Published

via MITRE·07:46 AM

Data Sourced

via MITRE·07:46 AM

DescriptionWeakness

Frequently Asked Questions

Which deployments should be prioritized for review?

Deployments running armeria versions earlier than 1.43.0 that process Thrift messages should be prioritized, because malformed Thrift input can trigger excessive memory allocation.

What does an attacker need to send to trigger the issue?

The issue is triggered by processing malformed Thrift messages. The available information does not specify any additional authentication or access requirements.

How can teams determine whether they may be affected?

Check the deployed armeria version and whether the application processes Thrift messages. Versions earlier than 1.43.0 may be affected.

CVE-2026-121824: Security vulnerability

Remediation

Event History

Frequently Asked Questions

Which deployments should be prioritized for review?

What does an attacker need to send to trigger the issue?

How can teams determine whether they may be affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for review?

What does an attacker need to send to trigger the issue?

How can teams determine whether they may be affected?