Is CVE-2024-4148 actively exploited?

No active exploitation of CVE-2024-4148 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-4148 be exploited remotely?

Yes. CVE-2024-4148 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-4148?

CVE-2024-4148 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2024-4148

HIGH

CVE-2024-4148

CWE-1333Published: June 1, 2024· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary application, version 1.2.10. An attacker can exploit this vulnerability by maliciously manipulating regular expressions, which can significantly impact the response time of the application and potentially render it completely non-functional. Specifically, the vulnerability can be triggered by sending a specially crafted request to the application, leading to a denial of service where the application crashes.

NVD Source

Technical Analysis

CVE-2024-4148 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.