CVE-2026-84890 is a vulnerability in the undici library for Node.js where the decompress interceptor component decompresses response bodies in a manner that leads to an availability impact. The CVSS vector indicates the attack requires network access with high complexity, no privileges, and no user interaction. The vulnerability does not affect confidentiality or integrity. There is no information on affected versions or available patches, and no known exploits are reported in the wild.

The vulnerability impacts availability, potentially causing denial of service or resource exhaustion conditions when decompressing response bodies. Confidentiality and integrity are not affected. The attack complexity is high, and no privileges or user interaction are required for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Users should monitor vendor communications for updates and apply patches once available.