CVE-2026-67991 | BDVDB-2026-358967 Detail

Description#

crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x. A very long crafted class, agent, or tool name can cause excessive CPU consumption and a denial of service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-13Record published in the CVE List.
2. Version 22026-09-04Most recent update recorded in the CVE List.