CVE-2026-120194 Red Hat CVE debrief

Who should care

Developers and administrators using json-glib in their applications should assess their exposure and prioritize patching or mitigation to prevent potential denial-of-service attacks.

Why it matters

CVE-2026-120194 is a high-severity vulnerability in json-glib that can lead to denial-of-service attacks. Developers and administrators should assess their exposure and prioritize patching or mitigation to prevent potential impacts on application availability and reliability.

• Potential denial-of-service attacks against applications using json-glib
• Need to assess exposure and prioritize patching or mitigation
• Possible impact on application availability and reliability

Technical summary

The json-glib library has a vulnerability in its JSONPath slice evaluator that can lead to an infinite loop when processing a slice expression with a negative step. This can cause a denial-of-service condition in applications that evaluate attacker-controlled JSONPath expressions. The vulnerability can be triggered by attacker-controlled input, and defenders should assess their exposure and prioritize patching or mitigation to prevent potential impacts on application availability and reliability. Limited source details are available, so explicit evidence limits and defensive verification tasks are necessary.

Defensive priority

Assess exposure, prioritize patching, and monitor for potential denial-of-service attacks.

Recommended defensive actions

• Assess exposure to json-glib in your environment
• Prioritize patching or mitigating the vulnerability
• Monitor for potential denial-of-service attacks
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in json-glib. Additional information on affected versions and remediation is limited, but defenders should verify the scope of the vulnerability and assess their exposure. The vulnerability can cause applications that evaluate attacker-controlled JSONPath expressions to enter an infinite loop, leading to a denial-of-service condition. Limited source details are available, so explicit evidence limits and defensive verification tasks are necessary.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.