Overview: 1 vulnerability

WSA Score Severity Issue Vulnerability type Scope Versions Fix Release date
WSA-2026-18 7.5
Missing size limit for the unterminated Relay text message received from a client. Memory Allocation with Excessive Size Value Relay 0.3.7 → 4.10.0 4.10.1

WSA-2026-18: [Relay] Missing size limit for the unterminated Relay text message received from a client.

Vulnerability
CVE
Not available
CVSS vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (detail)
CVSS score
7.5 / 10
Severity
high
Vulnerability type
Memory Allocation with Excessive Size Value (detail)
Scope
Relay
Affected versions
0.3.7 → 4.10.0
Fixed version
4.10.1 () - ChangeLog
Tracker
Commits
Description
When receiving a text message from a client, the Relay plugin builds a partial buffer until the end of text is found.
There is no limit for the allocated buffer.
A malicious client sending large amount of data without end of text can lead to memory exhaustion and the WeeChat process can be killed by the OOM killer.
Mitigation
Unload relay plugin with command: /plugin unload relay and see: /help weechat.plugin.autoload.
Credit
The issue was discovered by Acts1631.