CVE-2026-112300

A flaw was found in configobj. A remote attacker can trigger a Denial of Service (DoS) by supplying specially crafted configuration input to be parsed by the application. Due to inefficient regular expression evaluation in the _sectionmarker function, processing this input causes excessive CPU consumption and application unresponsiveness.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.