Overview: 1 vulnerability
WSA Score
Severity
Issue
Vulnerability type
Scope
Versions Fix Release date
WSA-2026-13 8.6
Use-after-free in the irc plugin when a batched message disconnects the server.
Use After Free
IRC
4.0.0 → 4.9.4
4.9.5
Jul 26, 2026
WSA-2026-13 : [IRC] Use-after-free in the irc plugin when a batched message disconnects the server.
Vulnerability
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
(
detail )
Affected versions
4.0.0 → 4.9.4
Description
When a batch message is received and one of the messages causes a disconnection from the server, the remaining messages are reading data that is already freed.
Mitigation
Disable batch capability:
/set irc.server_default.capabilities "*,!batch".
Credit
The issue was discovered by Mohammed Arib (
arib06 ).