CVSS 7.5 HIGH
Vulnerability
CVE-2026-32689: Phoenix: Long-poll NDJSON body splitting causes large memory allocation
Summary An unauthenticated denial-of-service vulnerability in Phoenix's long-poll transport allows a remote client to allocate a large amount of memory with a HTTP request. A handful of concurrent requests can be suffic…
7.5CVSS Score
HIGHSeverity
NOCISA KEV
VulnerabilityImpact Type
📋 Vulnerability Details
| CVE ID | CVE-2026-32689 |
| Vendor | erlang |
| Affected Product | phoenix |
| Vulnerability Type | Vulnerability |
| CVSS Score | 7.5 (HIGH) |
| Actively Exploited | ❌ No known exploitation |
| Patch Status | See Vendor Advisory → |
| Reported By | CYBERDUDEBIVASH SENTINEL APEX Intelligence (via github_advisories) |
🔬 Technical Analysis
#
Summary An unauthenticated denial-of-service vulnerability in Phoenix's long-poll transport allows a remote client to allocate a large amount of memory with a HTTP request. A handful of concurrent requests can be sufficient to let the node run out of memory. See also https://cna.erlef.org/cves/CVE-2026-32689.html.
Details The unoptimised code path exists on the application/x-ndjson POST handling in the LongPoll transport. The endpoint requires only a session token, which any client can obtain by issuing a GET to the same URL with a matching Origin header, so exploitation is unauthenticated.
Impact Anyone who runs a LiveView app with a public Longpoll socket or uses a Phoenix.Socket with longpoll option.
Longpoll has been enabled for newly generated Phoenix projects since
🎯 Known Indicators of Compromise
{"type":"url","value":"https://cna.erlef.org/cves/CVE-2026-32689.html.","confidence_score":0.82,"first_seen":"2026-05-08","source_count":1}
{"type":"domain","value":"cna.erlef.org","confidence_score":0.75,"first_seen":"2026-05-08","source_count":1}
⚡ DETECTION RULES AVAILABLE
Get CVE-2026-32689 Detection Pack
Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.
✓ Sigma Rules
✓ YARA Pack
✓ IOC Table
✓ SIEM Queries
🛡️ Get Detection Pack →
🔌 Access via API →