VULNERABILITY INTELLIGENCE
CVE-2026-53781
CVSS score5.3 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-06-11
Last modified2026-10-26
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Description
Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missing or misreported Content-Length headers, chunked transfer encoding, or failed HEAD requests. Attackers who control a podcast feed or media URL can stream an unbounded response to local storage via the temp-file download path, exhausting disk or system resources on the host running the CLI.
Weakness classification
- CWE-770: Allocation of Resources Without Limits or Throttling