https://seclists.org/oss-sec/2026/q4/5: CVE-2026-94250: Apache APISIX: Batch sponse agggation can exhaust worker memory

Q: Which deployments are exposed to unauthenticated exploitation?

Deployments are exposed when a route uses the batch-requests plugin and its batch endpoint is publicly accessible. An attacker does not need authentication or user interaction to target that endpoint.

Q: What is the practical impact of a successful attack?

An attacker can cause a gateway worker to run out of memory. The vulnerability affects availability rather than confidentiality or integrity, according to the supplied CVSS vector.

Q: What versions should be remediated, and what update fixes the issue?

Apache APISIX versions 1.3.0 through 3.18.0 are affected. Upgrade to Apache APISIX 3.19.0, which fixes the issue.

Q: What can be done if an immediate upgrade is not possible?

Do not publicly expose batch endpoints on routes that use the batch-requests plugin. Restricting access to those endpoints removes the unauthenticated attack condition described in the advisory.

Published Oct 1, 2026

Updated

Affected Software

1 affected component

Apache APISIX>=1.3.0<=3.18.0

Frequently Asked Questions

Which deployments are exposed to unauthenticated exploitation?

Deployments are exposed when a route uses the batch-requests plugin and its batch endpoint is publicly accessible. An attacker does not need authentication or user interaction to target that endpoint.

What is the practical impact of a successful attack?

An attacker can cause a gateway worker to run out of memory. The vulnerability affects availability rather than confidentiality or integrity, according to the supplied CVSS vector.

What versions should be remediated, and what update fixes the issue?

Apache APISIX versions 1.3.0 through 3.18.0 are affected. Upgrade to Apache APISIX 3.19.0, which fixes the issue.

What can be done if an immediate upgrade is not possible?

Do not publicly expose batch endpoints on routes that use the batch-requests plugin. Restricting access to those endpoints removes the unauthenticated attack condition described in the advisory.