CVE-2026-45078 — Synapse CPU starvation (Denial of Service)

CVE-2026-45078

Synapse CPU starvation (Denial of Service) PUBLISHED

Description (CNA)

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users can cause Synapse to starve other requests of CPU and lead to other requests failing, causing other users to be denied service. This vulnerability is fixed in 1.152.1.

Affected (CNA)

Vendor / product	Versions
element-hq / synapse	affected < 1.152.1

CWE

CWE-770

References

https://github.com/element-hq/synapse/security/advisories/GHSA-8q93-326v-3m7g

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.