CVE-2026-41604 | Apache Thrift up to 0.22.0 skip denial of service

A vulnerability marked as problematic has been reported in Apache Thrift up to 0.22.0. Affected by this vulnerability is the function skip. The manipulation leads to denial of service.

This vulnerability is traded as CVE-2026-41604. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.