{"id":"CVE-2026-110594","summary":"BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex","details":"BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers via unbounded routing rule regex patterns. Attackers can create a routing rule with a catastrophically backtracking pattern evaluated by _match_condition() during case saves, exhausting workers shared across all tenants.","modified":"2026-10-15T02:47:30.424469152Z","published":"2026-10-14T14:16:38.449Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110594.json","cna_assigner":"VulnCheck","cwe_ids":["CWE-1333"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110594.json"},{"type":"PACKAGE","url":"https://github.com/Django-CRM/Django-CRM"},{"type":"ARTICLE","url":"https://github.com/Django-CRM/Django-CRM/blob/v1.14.5/backend/cases/routing.py#L107-L114"},{"type":"REPORT","url":"https://github.com/Django-CRM/Django-CRM/issues/830"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110594"},{"type":"WEB","url":"https://pypi.org"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/bottlecrm-0.43-through-1.14.5-redos-via-case-routing-rule-regex"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/django-crm/django-crm","events":[{"introduced":"c6c9a20d70147a0e198483363e88563547d86a43"},{"last_affected":"5d71f263681b42b1225a8faf27ef560dfcc25f03"}],"database_specific":{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"0.43"},{"last_affected":"1.14.5"}]}}],"versions":["v1.14.5","v1.14.4","v1.14.3","v1.14.2","v1.14.1","v1.14.0","v1.13.0","v1.12.0","v1.11.1","v1.11.0","v1.10.0","v1.9.2","v1.9.1","v1.9.0","v1.8.0","v1.7.0","v1.6.0","v1.5.0","v1.4.0","v1.3.1","1.2","1.1","1.0","0.47","0.46","0.45","0.44","0.43"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110594.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}