Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Apache NiFi Registry can be stopped by crafted gRPC request
published 28 days ago
Summary
Apache NiFi Registry uses Micrometer to handle gRPC calls. An attacker can send specially formed requests that overload the service, causing it to become unresponsive. Apply the latest software update or patch to protect the system.
What to do
- Update cleanstart apache-nifi-registry to version 2.9.0-r6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | apache-nifi-registry |
< 2.9.0-r6 Fix: upgrade to 2.9.0-r6
|
Original advisory text
In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition
Security vulnerability affects the apache-nifi-registry package. In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published8 Oct 2026
Updated8 Oct 2026
First seen8 Oct 2026
Sources
CLEANSTART-2026-BP29936 · OSV
Track software like this
Free during beta