A vulnerability was found in Apache OpenNLP up to 2.5.8/3.0.0-M2. It has been declared as problematic. This affects an unknown function of the component AbstractModelReader. The manipulation results in denial of service.
This vulnerability is identified as CVE-2026-42440. The attack can be executed remotely. There is not any exploit available.
It is recommended to upgrade the affected component.
