EUVD-2026-24217Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
6DescriptionGitHub Advisory
Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers (/api/state, /api/restore, and /api/history-svg) that process incoming requests by accumulating the entire request body into a JavaScript string without any size limitations. Node.js buffers the entire payload in the V8 heap. Sending a sufficiently large body (e.g., 500 MiB or more) will exhaust the process heap memory, leading to an Out-of-Memory (OOM) error that crashes the MCP server. This vulnerability is fixed in 0.4.15.
AnalysisAI
Denial of service in Next AI Draw.io prior to version 0.4.15 allows local attackers to crash the embedded HTTP sidecar by sending oversized request bodies to three POST endpoints (/api/state, /api/restore, /api/history-svg) without size limits, exhausting Node.js V8 heap memory and forcing an out-of-memory shutdown. CVSS 6.2 reflects local attack vector and high availability impact; no public exploit code confirmed at time of analysis.
Technical ContextAI
Next AI Draw.io is a Node.js web application that combines AI functionality with draw.io diagram editing. The vulnerability stems from CWE-770 (Allocation of Resources Without Limits or Throttling), where the embedded HTTP sidecar lacks request body size validation. When requests arrive at the three POST handlers, Node.js automatically buffers the entire payload into the V8 JavaScript heap without enforcing maximum payload size limits. This design choice allows attackers to submit payloads of 500 MiB or larger, exhausting available heap memory and triggering an out-of-memory condition that terminates the sidecar process.
RemediationAI
Upgrade Next AI Draw.io to version 0.4.15 or later, which implements request body size limits on the three vulnerable POST handlers (/api/state, /api/restore, /api/history-svg). The fix is available at GitHub commit 31819f413cc4b329a1cb81e5fccd0cd98c1fd665 and has been released in tagged version 0.4.15. For organizations unable to patch immediately, implement network-level controls to restrict POST request payload sizes to the sidecar endpoints (e.g., reverse proxy maximum body size limits of 10-50 MiB depending on legitimate use cases) and restrict network access to the sidecar to trusted local clients only. These compensating controls add latency and administrative overhead but effectively prevent exploitation until patching is completed.
FortiOS and FortiProxy contain an authentication bypass via the Node.js websocket module allowing unauthenticated remote
Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for t
Flowise version 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig paramete
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was inc
An issue was discovered in the node-serialize package 0.0.4 for Node.js. Rated critical severity (CVSS 9.8), this vulner
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary fi
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwin
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, whic
Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read
Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio
Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rat
The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of se
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today