high severity · published 2026-10-29
An unauthenticated attacker can make the Docker API server accept crawl requests with huge delay settings that the server fails to cap. This holds browser pages or stalls the rate limiter, exhausting the page pool and blocking other crawls.
Fixed in: 0.9.5
CVE: CVE-2026-119119
Source: NVD
You are affected if the installed version is older than 0.9.5. Check the version you have and update to 0.9.5 or later. The fixed version is verified against a vendor or advisory source.
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 622 and your operating system.