PT-2026-48527 · Cometd · Cometd

Published 2026-06-10 · Updated 2026-06-10 · CVE-2025-53114

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CometD versions 5.0.x CometD versions 6.0.x CometD versions 8.0.x

Description Improper handling of the acknowledgement extension allows malicious clients to cause a server outage. By consistently sending a fixed batch value in the ext parameter (specifically ack: 1) during the connection to the '/meta/connect' endpoint, the unacknowledged message queue grows indefinitely. This leads to an OutOfMemoryError, a condition where the system cannot allocate more memory for its operations.

Recommendations Update CometD version 5.0.x to the patched version. Update CometD version 6.0.x to the patched version. Update CometD version 8.0.x to the patched version. As a temporary workaround, disable the acknowledgement extension.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-53114

GHSA-CQGJ-H8VF-4W59

Affected Products

Cometd

References · 11

• https://osv.dev/vulnerability/GHSA-cqgj-h8vf-4w59 · Vendor Advisory
• https://github.com/cometd/cometd · Note
• https://github.com/cometd/cometd/pull/2118 · Note
• https://reddit.com/r/VulnMatter/comments/1u2cn8w/resumen_diario_de_vulnerabilidades_10062026 · Reddit Post
• https://github.com/cometd/cometd/security/advisories/GHSA-cqgj-h8vf-4w59 · Note
• https://github.com/cometd/cometd/pull/2168 · Note
• https://github.com/cometd/cometd/pull/2169 · Note
• https://github.com/cometd/cometd/issues/2117 · Note
• https://reddit.com/r/VulnMatter/comments/1u2coat/resumen_diario_de_vulnerabilidades_10062026 · Reddit Post
• https://github.com/cometd/cometd/discussions/2116 · Note
• https://twitter.com/dailycve/status/2064805399325200438 · Twitter Post