Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-49234

Routinator crashes on specifically crafted ASN strings in the API

Description

When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API access from untrusted networks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NLnet Labs Routinator

Default version status: affected

  • 0.15.2 to < *unaffected

References