CVE-2026-105659

Uncontrolled Resource Consumption vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin HTTP/2 stream processes indefinitely via a trickle of small WINDOW_UPDATE frames. A stream whose response outruns the connection or stream send window blocks until the peer grants more window, and each block carries a 15 second deadline. Both deadlines restart whenever the peer makes partial progress. Bandit.HTTP2.Connection.finish_data/5 re-queues a partially advanced send in pending_sends with a fresh expires_at, so every WINDOW_UPDATE on stream 0, and every SETTINGS frame, resets the clock. Bandit.HTTP2.Stream.send_data/3 recurses on each stream WINDOW_UPDATE and re-arms a fresh after read_timeout. A peer that grants a few bytes every few seconds keeps the blocked stream process, its Plug state and any resource it holds mid-response alive for as long as it keeps dripping, and repeats this across streams and connections to exhaust server processes and memory. The two paths are independent. The stream-level block is reached on its own by widening the connection window with a large WINDOW_UPDATE on stream 0 and shrinking the per-stream window with a small SETTINGS_INITIAL_WINDOW_SIZE, so closing only the connection-level path leaves it exploitable. This issue affects bandit: from 1.4.0 before 1.13.0.

• CWE-400

• https://cna.erlef.org/cves/CVE-2026-105659.html
• https://github.com/mtrudel/bandit/commit/d88b21953c65061f21136ea76a89a4f95a2ac7a1
• https://github.com/mtrudel/bandit/commit/fff06efe3be962b484bd4d3eb339372fda5a231f
• https://github.com/mtrudel/bandit/security/advisories/GHSA-69m6-wcv4-rwcf
• https://osv.dev/vulnerability/EEF-CVE-2026-105659
• https://github.com/mtrudel/bandit/security/advisories/GHSA-69m6-wcv4-rwcf

Published

Oct 14, 2026

Last Modified

Oct 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105648Ghost is a Node.js content management system. From 6.0.9 unt…4
• CVE-2026-105649Ghost is a Node.js content management system. From 4.22.0 un…7.3
• CVE-2026-10565A security flaw has been discovered in Open5GS up to 2.7.6. …3.1
• CVE-2026-105650Ghost is a Node.js content management system. From 2.1.0 unt…8.1
• CVE-2026-105651Ghost is a Node.js content management system. From 5.94.0 un…7.3
• CVE-2026-105652Ghost is a Node.js content management system. From 0.7.2 unt…3.1
• CVE-2026-10566A weakness has been identified in FoundationAgents MetaGPT u…5.3
• CVE-2026-105660Improper Validation of Syntactic Correctness of Input vulner…6.9
• CVE-2026-105661Requesting `/{username}/-/repositories` for an individual us…5.3
• CVE-2026-105664The endpoint exposes an observable response discrepancy when…5.3
• CVE-2026-105667In the default configuration, the HL7 listener accepts ADT^A…7.5
• CVE-2026-105668Protection Mechanism Failure vulnerability in hexpm hex allo…7.1