{"id":"CVE-2026-107805","published":"2026-10-09T15:17:09.960","lastModified":"2026-10-13T17:17:17.840","description":"Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated remote client that can reach the API and provide syntactically valid signature metadata can consume temporary filesystem capacity, disk input and output, and request-processing resources before rejection. The issue affects availability and does not bypass authentication or provide confidentiality or integrity impact. This issue is fixed in version 2.6.0.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-400"],"vendors":[],"products":[],"references":[{"url":"https://github.com/0xJacky/nginx-ui/commit/8c9b9a1aff218ee6c980d047b750e49da3c46796","tags":[]},{"url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.6.0","tags":[]},{"url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-j3hg-9rp3-5hw9","tags":[]}],"exploitRefs":[{"url":"https://github.com/0xJacky/nginx-ui/commit/8c9b9a1aff218ee6c980d047b750e49da3c46796","tags":[]},{"url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.6.0","tags":[]},{"url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-j3hg-9rp3-5hw9","tags":[]}],"hasPoc":true,"ai":{"summary":"Nginx UI's node-signature authentication allows unauthenticated attackers to consume system resources through temporary file staging, leading to availability degradation without compromising confidentiality or integrity. This is a resource exhaustion vulnerability that can be exploited remotely.","exploitability":"Exploitation is relatively straightforward for any remote attacker who can reach the API endpoint and provide syntactically valid signature metadata, requiring no authentication or special privileges.","blast_radius":"The impact could affect all Nginx UI instances running versions 2.5.0 through 2.6.0, potentially causing service unavailability or degraded performance for legitimate users.","remediation":"Upgrade to version 2.6.0 or later to fix the resource exhaustion vulnerability in node-signature authentication.","detection":"Monitor for unusual disk I/O patterns and temporary file creation in the Nginx UI application directory, particularly around the authentication endpoint, as attackers may create multiple temporary files during signature validation attempts.","tags":["dos","web","resource-exhaustion","nginx"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:02:02.370Z"}}