PT-2026-3489 · Birkir · Birkir

Zast.Ai · Published 2026-01-19 · Updated 2026-01-20 · CVE-2026-1173

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions birkir versions prior to 0.4.0.beta.0

Description A flaw exists in birkir that could lead to a denial of service. The issue is located within the GraphQL Array Based Query Batch Handler component, specifically affecting an unknown function within the /graphql file. The vulnerability can be exploited remotely, and details about the exploit have been publicly disclosed. The project maintainers were notified of the issue but have not yet responded.

Recommendations Update to a version of birkir greater than 0.4.0.beta.0.

Exploit

Fix

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2026-1173

Affected Products

Birkir

References · 9

• 🔥 https://github.com/birkir/prime/issues/544 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-1173 · Security Note
• https://osv.dev/vulnerability/CVE-2026-1173 · Vendor Advisory
• https://vuldb.com/?ctiid.341767 · Note
• https://twitter.com/CVEnew/status/2013338857824276569 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2013426700655206406 · Twitter Post
• https://vuldb.com/?id.341767 · Note
• https://github.com/birkir/prime · Note
• https://vuldb.com/?submit.731104 · Note