CVE-2026-49234 — Routinator crashes on specifically crafted ASN strings in the API
When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API a…
Published: 2026-06-08 · CVSS: 8.2 · CVSS 4.0
When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API access from untrusted networks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7