CVE-2026-8319: Resource Consumption in aiwaves-cn agents
CVE-2026-8319 is a medium severity vulnerability in aiwaves-cn agents affecting the function recall_relevant_memories_to_working_memory within the cheshire_cat_core component. This flaw leads to resource consumption when exploited remotely without requiring authentication or user interaction. The vulnerability has a CVSS 4.0 base score of 6.9 and the exploit code is publicly available. The vendor has not yet responded or provided a patch, and the product uses a rolling release model without specific version updates. No known exploits in the wild have been reported.
AI Analysis
Technical Summary
This vulnerability exists in aiwaves-cn agents up to commit e8c4e3c2d19739d3dff59e577d1c97090cc15f59, specifically in the recall_relevant_memories_to_working_memory function of core/cat/looking_glass/stray_cat.py within the cheshire_cat_core component. The issue causes excessive resource consumption, which can be triggered remotely without privileges or user interaction. The vulnerability has been publicly disclosed with exploit code available, but the vendor has not issued a fix or official remediation guidance. Due to the rolling release nature of the product, no fixed version details are provided.
Potential Impact
Successful exploitation can lead to resource exhaustion on affected systems, potentially degrading performance or causing denial of service. The vulnerability can be triggered remotely without authentication, increasing its risk. However, no active exploitation in the wild has been reported to date.
Mitigation Recommendations
As of now, no official patch or remediation has been provided by the vendor. Users should monitor the vendor's communications for updates and consider implementing resource usage limits or other protective controls to mitigate potential impact until a fix is available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
CVE-2026-8319: Resource Consumption in aiwaves-cn agents
Description
CVE-2026-8319 is a medium severity vulnerability in aiwaves-cn agents affecting the function recall_relevant_memories_to_working_memory within the cheshire_cat_core component. This flaw leads to resource consumption when exploited remotely without requiring authentication or user interaction. The vulnerability has a CVSS 4.0 base score of 6.9 and the exploit code is publicly available. The vendor has not yet responded or provided a patch, and the product uses a rolling release model without specific version updates. No known exploits in the wild have been reported.
CVSS v4.0
Score 6.9medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in aiwaves-cn agents up to commit e8c4e3c2d19739d3dff59e577d1c97090cc15f59, specifically in the recall_relevant_memories_to_working_memory function of core/cat/looking_glass/stray_cat.py within the cheshire_cat_core component. The issue causes excessive resource consumption, which can be triggered remotely without privileges or user interaction. The vulnerability has been publicly disclosed with exploit code available, but the vendor has not issued a fix or official remediation guidance. Due to the rolling release nature of the product, no fixed version details are provided.
Potential Impact
Successful exploitation can lead to resource exhaustion on affected systems, potentially degrading performance or causing denial of service. The vulnerability can be triggered remotely without authentication, increasing its risk. However, no active exploitation in the wild has been reported to date.
Mitigation Recommendations
As of now, no official patch or remediation has been provided by the vendor. Users should monitor the vendor's communications for updates and consider implementing resource usage limits or other protective controls to mitigate potential impact until a fix is available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-11T13:18:34.721Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a022c3bcbff5d86104f7d98
Added to database: 05/11/2026, 19:21:31 UTC
Last enriched: 05/19/2026, 10:55:41 UTC
Last updated: 07/31/2026, 19:23:00 UTC
Views: 73
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.