CVE-2025-67899 is a vulnerability in the uriparser library that permits unbounded recursion and stack consumption via a large input containing many commas. This can lead to resource exhaustion and potential denial of service. The vulnerability requires local access and a specially crafted URI to trigger, with a high attack complexity. Red Hat rates this vulnerability as low severity due to these limiting factors. No official fix or mitigation that meets Red Hat's standards for ease of deployment and applicability is currently provided. The issue is tracked under Bugzilla 2422120 and corresponds to CWE-674 (Uncontrolled Recursion).

The vulnerability can cause denial of service through resource exhaustion (stack consumption) when processing maliciously crafted URIs locally. There is no impact on confidentiality or integrity. The attack requires local access and is complex to execute, reducing its practical risk in typical Red Hat environments.

Red Hat currently does not provide a fix or mitigation that meets their criteria for this vulnerability. Users should monitor Red Hat advisories for future updates. Due to the high attack complexity and requirement for local access, the practical risk is limited. No immediate action is mandated by Red Hat.