Which versions of Pathway are affected by CVE-2026-59094?

The Pathway data-processing framework contains a remote denial-of-service vulnerability (CVE-2026-59094, CVSS 8.7) exploitable by unauthenticated attackers using publicly available code.. A patch is available.

Is there a public PoC exploit available for CVE-2026-59094?

Yes, a public proof-of-concept exploit is available for CVE-2026-59094. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate CVE-2026-59094?

Within 24 hours: Identify all Pathway deployments (versions through 0.31.1), monitor /v1/retrieve, /v1/inputs, and /v2/answer endpoints for suspicious glob pattern requests. Within 7 days: Deploy vendor patch (commit d09722e) or upgrade to the first patched release following version 0.31.1; implement request rate-limiting on affected endpoints as interim measure. Within 30 days: Validate patch deployment across production and non-production environments, conduct DoS vulnerability testing to confirm remediation, update asset inventory with patched versions.

Pathway CVE-2026-59094

Q: What is the CVSS score of CVE-2026-59094?

CVE-2026-59094 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

EUVD-2026-41425 HIGH

Inefficient Algorithmic Complexity (CWE-407)

2026-07-02 VulnCheck

GHSA-22xx-xg3v-m8g7

Information Disclosure Pathway

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Remote unauthenticated endpoint (AV:N/PR:N), trivially crafted pattern (AC:L), no confidentiality or integrity impact and no scope change, availability fully impacted (A:H).

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 02, 2026 - 20:32 vuln.today

CVSS changed

Jul 02, 2026 - 20:22 NVD

7.5 (HIGH) 8.7 (HIGH)

DescriptionCVE.org

Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied glob pattern to indexed document paths using a hand-written recursive matcher that branches two ways on each token without memoization, giving exponential worst-case complexity. The filepath_globpattern value is taken from the body of the unauthenticated HTTP endpoints /v1/retrieve, /v1/inputs and /v2/answer and compiled into a filter evaluated once per indexed document, with no length or -count limit. A remote unauthenticated attacker can submit a short pattern containing many ** tokens to consume CPU for tens of seconds per request, and a small number of requests denies service.

AnalysisAI

Denial of service in Pathway data-processing framework (versions through 0.31.1) lets a remote unauthenticated attacker exhaust CPU by submitting a short glob pattern packed with many tokens to the document store's /v1/retrieve, /v1/inputs and /v2/answer endpoints. The hand-written recursive matcher branches exponentially on each without memoization, so a handful of crafted requests can stall the service for tens of seconds each and deny availability. Publicly available exploit code exists and a vendor patch (commit d09722e) is available; the flaw is not listed in CISA KEV.

Technical ContextAI

Pathway (pathwaycom/pathway) is a Python framework for real-time data processing and LLM/RAG pipelines; the affected component is its document store, which exposes HTTP retrieval endpoints. The vulnerability is a CWE-407 (Inefficient Algorithmic Complexity) issue: a caller-supplied filepath_globpattern is compiled into a filter and evaluated once per indexed document using a custom recursive glob matcher. Because each token spawns two recursive branches with no memoization, matching cost grows exponentially with the number of tokens - a classic algorithmic-complexity / ReDoS-style amplification, but in a bespoke glob engine rather than a regex library. No length limit or **-count cap is applied to the untrusted input.

RemediationAI

Upstream fix available (commit d09722e via PR #250); a released patched version number is not independently confirmed from the provided data, so upgrade to the first tagged Pathway release that includes commit d09722eef03fd94bba701836eb4c7fbfa3d3b88e (verify against the repository beyond 0.31.1). Until patched, restrict or remove untrusted network access to the document store endpoints /v1/retrieve, /v1/inputs and /v2/answer - for example place them behind authentication or an allowlisted reverse proxy - accepting that this breaks any legitimate anonymous retrieval clients. As a targeted compensating control, enforce input validation on the filepath_globpattern field by capping pattern length and the number of ** tokens at the proxy/WAF layer, and apply per-request CPU/time limits and rate limiting so a single slow request cannot monopolize a worker; these mitigations may reject some legitimate broad glob queries. See the VulnCheck advisory (https://www.vulncheck.com/advisories/pathway-unauthenticated-denial-of-service-via-exponential-glob-pattern-matching-in-document-store) and the patch commit for authoritative details.