PT-2026-45840 · Tesla · Tesla
CVSS v4.0
8.2
High
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
tesla versions 1.3.0 through 1.18.2
Description
An issue in Tesla.Adapter.Mint allows for a denial of service via atom table exhaustion. The function
open conn/2 converts the URL scheme of outgoing requests into a BEAM atom using String.to atom(uri.scheme) without allow-list validation. BEAM atoms are permanent entries that are not garbage-collected and are limited to a bounded table of approximately 1,048,576 entries. An attacker capable of influencing the request URL—through application-level URL-forwarding features like webhooks, proxies, or importers, or via a Location header when Tesla.Middleware.FollowRedirects is active—can create a new atom for each request by varying the scheme string. Once the atom table is full, the virtual machine crashes, resulting in a complete application shutdown.Recommendations
Update to version 1.18.3.
Exploit
Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tesla