This vulnerability in bytedance InfiniStore (versions up to 0.2.33) is caused by inefficient algorithmic complexity in the purge_kv_map function within the KV Map Handler component. The issue can be triggered by a local attacker with low privileges and does not require user interaction. The inefficient algorithmic complexity could potentially lead to performance degradation or denial of service conditions under certain circumstances. No exploits are currently known, and the vendor has not issued a patch or official fix.

The impact is limited to potential performance degradation or denial of service due to inefficient algorithmic complexity triggered locally. There is no indication of data compromise, privilege escalation, or remote exploitation. The vulnerability requires local access and low privileges, which limits its severity and scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is available, users should monitor vendor communications for updates. In the meantime, restrict local access to trusted users only to reduce risk.