Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agent | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade amazon-cloudwatch-agent | May 28, 2026 | Mar 26, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 26, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 9.4.13Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 10.4.1 | Jul 16, 2026 | Mar 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub