The CloudburstMC Network library versions before 1.0.0.CR3-20260418.124334-32 contain an input validation flaw (CWE-20) that can be triggered remotely without privileges or user interaction. Exploiting this flaw causes the parent netty channel to close, resulting in denial of service by rendering the network component inoperable. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability. Consumers of the library are advised to upgrade to at least version 1.0.0.CR3-20260418.124334-32 to remediate the issue. No official remediation level or patch link is provided in the data, and no known exploits are reported in the wild.

Successful exploitation results in denial of service by closing the parent netty channel, causing the affected network component to become inoperable. There is no impact on confidentiality or integrity, but availability is severely affected. This can disrupt services relying on the CloudburstMC Network library versions prior to the fixed release.

Upgrade all affected instances of the CloudburstMC Network library to version 1.0.0.CR3-20260418.124334-32 or later. There are no known workarounds or temporary fixes beyond updating the library. Patch status is not explicitly confirmed in the vendor advisory data, so users should verify with the vendor for the latest remediation guidance.