CVE-2026-49234

Routinator crashes on specifically crafted ASN strings in the API PUBLISHED

Description (CNA)

When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API access from untrusted networks.

Affected (CNA)

Vendor / product	Versions
NLnet Labs / Routinator	unaffected 0.15.2 before *

CWE

CWE-20

References

https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-49234.txt

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.