The vulnerability in Data::RadixTree::Shared (CVE-2026-59141) arises from insufficient validation of node records after the header validation in the rdx_validate_header function. Specifically, rdx_find_locked indexes node children and reads label offsets and lengths directly from a memory-mapped segment without bounds checking against node count or arena size. A local attacker who can modify the backing file can craft node records that cause out-of-bounds reads, potentially leading to memory disclosure or application crashes.

An attacker with local write access to the backing file can cause out-of-bounds reads, which may lead to information disclosure of adjacent memory or cause the application to crash. There is no indication of remote exploitation or privilege escalation from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict write access to the backing file to trusted users only to prevent poisoning of node records.