CVE-2026-92081

[CVE catalog]

Severity

Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Published

Sep 16, 2026, 8:52:49 AM UTC

Updated

Sep 16, 2026, 9:17:10 AM UTC

Source

[NVD] · [CVE record]

EPSS

0.41% · Oct 25, 2026

A flaw was found in fastify. When a route registers a response trailer and is served over HTTP/2, fastify incorrectly sets the 'Transfer-Encoding: chunked' header. This leads to an unhandled exception in Node.js, causing the server process to crash and resulting in a Denial of Service (DoS). A remote, unauthenticated attacker can trigger this flaw with a single HTTP/2 request to any route using trailers, repeatedly crashing the server. fastify: fastify: Denial of Service via unhandled exception on HTTP/2 trailer responses This Moderate impact denial of service vulnerability in fastify affects Red Hat OpenShift AI and Red Hat Enterprise Linux AI components. An unauthenticated attacker could crash the server process by sending an HTTP/2 request to a route configured to use response trailers, leading to service disruption. This issue arises when applications explicitly register response trailers via `reply.trailer()` on HTTP/2 routes. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.