A memory leak vulnerability was found in the SmallRye Fault Tolerance library used by Quarkus, specifically when using the @ApplyGuard or @ApplyFaultTolerance annotations. The flaw causes internal tracking objects to not be released after each request, leading to increased memory consumption, application slowdown, and eventual crash due to out-of-memory conditions. This issue is tracked as CVE-2026-94449 and has a high severity rating with a CVSS score of 7.5. Red Hat has released a security update in Quarkus 3.27.6 that addresses this vulnerability.