CVE-2026-61373: Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation

Q: Which deployments are affected?

Apache Thrift Java deployments using TSaslNonblockingServer are affected if they run a version before 0.25.0.

Q: What does an attacker need to reach to exploit this issue?

The issue occurs during pre-authentication SASL frame handling, so an attacker would need to be able to send SASL traffic to a reachable Java TSaslNonblockingServer.

Q: How can I determine whether remediation is needed?

Identify Apache Thrift Java services that use TSaslNonblockingServer and check their Thrift version. Versions earlier than 0.25.0 require an upgrade to 0.25.0.

Published Oct 2, 2026

Updated

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Affected Software

1 affected component

Apache Thrift<0.25.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Apache Thrift to a version that resolves this vulnerability.
Fixed in 0.25.0

Event History

Oct 2, 2026

CVE Published

via MITRE·11:07 AM

Data Sourced

via MITRE·11:07 AM

DescriptionWeakness

Frequently Asked Questions

Which deployments are affected?

Apache Thrift Java deployments using TSaslNonblockingServer are affected if they run a version before 0.25.0.

What does an attacker need to reach to exploit this issue?

The issue occurs during pre-authentication SASL frame handling, so an attacker would need to be able to send SASL traffic to a reachable Java TSaslNonblockingServer.

How can I determine whether remediation is needed?

Identify Apache Thrift Java services that use TSaslNonblockingServer and check their Thrift version. Versions earlier than 0.25.0 require an upgrade to 0.25.0.

CVE-2026-61373: Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to reach to exploit this issue?

How can I determine whether remediation is needed?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to reach to exploit this issue?

How can I determine whether remediation is needed?