CVE-2026-45785

OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage. In 3.1.3 and earlier, the BST name-lookup loop in DirectoryTree.TryGetDirectoryEntry (OpenMcdf/DirectoryTree.cs:35-46) walks directory entries by repeatedly calling directories.TryGetSibling(child, siblingType, validateColor). A crafted CFB file with cyclic Left/Right sibling links among directory entries, constructed so the per-step BST-order check in TryGetSibling (DirectoryEntries.cs:84-85) is satisfied at every step, drives this while (child is not null) loop forever. There is no cycle detection in TryGetDirectoryEntry, and the bug is reachable from RootStorage.OpenStorage(name), TryOpenStorage(name), OpenStream(name), and TryOpenStream(name), causing an unrecoverable denial of service. This issue is fixed in version 3.1.4.

• CWE-835

• https://github.com/openmcdf/openmcdf/commit/c6f82db722bd85db7b0caed3ca1aa374f1e07bc7
• https://github.com/openmcdf/openmcdf/releases/tag/v3.1.4
• https://github.com/openmcdf/openmcdf/security/advisories/GHSA-5qwm-7pvp-w988
• https://github.com/openmcdf/openmcdf/security/advisories/GHSA-5qwm-7pvp-w988

Published

Jul 17, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4578A vulnerability was determined in code-projects Exam Form Su…2.4
• CVE-2026-45780Discourse is an open-source discussion platform. Prior to 20…4.3
• CVE-2026-45781The MCP Registry provides MCP clients with a list of MCP ser…3.5
• CVE-2026-45782Cloud Hypervisor is a Virtual Machine Monitor for Cloud work…8.9
• CVE-2026-45783libp2p is a JavaScript Implementation of libp2p networking s…7.5
• CVE-2026-45784rust-openssl provides OpenSSL bindings for the Rust programm…7.1
• CVE-2026-45787electerm is an open-sourced terminal/ssh/sftp/telnet/serialp…9.1
• CVE-2026-45788Discourse is an open-source discussion platform. Prior to 20…7.5
• CVE-2026-4579A vulnerability was identified in code-projects Simple Laund…9.8
• CVE-2026-45792rtk filters and compresses command outputs before they reach…5.5
• CVE-2026-45793Composer is a dependency Manager for the PHP language. Prior…7.5
• CVE-2026-45795The Janssen Project is an open-source identity and access ma…5.3