Is CVE-2024-8763 actively exploited?

No active exploitation of CVE-2024-8763 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-8763 be exploited remotely?

Yes. CVE-2024-8763 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-8763?

CVE-2024-8763 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2024-8763

HIGH

CVE-2024-8763

CWE-1333Published: March 20, 2025· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary repository, specifically in the compileTextTemplate function. The affected version is git be54057. An attacker can exploit this vulnerability by manipulating the regular expression /{{(.*?)}}/g, causing the server to hang indefinitely and become unresponsive to any requests. This is due to the regular expression's susceptibility to second-degree polynomial time complexity, which can be triggered by a large number of braces in the input.

NVD Source

Technical Analysis

CVE-2024-8763 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.