CVE-2026-67198: Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher
Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as ViewToArrowReq with no viewport set or MakeTableReq with no data field to trigger unwrap() calls on None values at nine distinct sites, causing the process to abort with SIGABRT.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-67198?
The severity of CVE-2026-67198 is classified as high, with a score of 7.5.
How does CVE-2026-67198 impact Perspective 5.0.0?
CVE-2026-67198 allows unauthenticated remote attackers to crash the server process through malformed protobuf messages.
What type of attack is associated with CVE-2026-67198?
CVE-2026-67198 is associated with a denial-of-service (DoS) attack.
Can CVE-2026-67198 be exploited remotely?
Yes, CVE-2026-67198 can be exploited by unauthenticated remote attackers.
What are the steps to mitigate CVE-2026-67198?
To mitigate CVE-2026-67198, it is recommended to update Perspective to a version that addresses this vulnerability.