ID:12580 - Exploit for Inefficient Algorithmic Complexity in jq - CVE-2026-40164

 
Main Vulnerability Database Exploits ID:12580 - Exploit for Inefficient Algorithmic Complexity in jq - CVE-2026-40164

ID:12580 - Exploit for Inefficient Algorithmic Complexity in jq - CVE-2026-40164

Published: April 13, 2026


Vulnerability identifier: #VU125832
Vulnerability risk: Medium
CVE-ID: CVE-2026-40164
CWE-ID: CWE-407
Exploitation vector: Remote access
Vulnerable software:
jq

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to inefficient algorithmic complexity within hardcoded MurmurHash3 seed. A remote attacker can cause a denial of service condition on the target system.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.