Is CVE-2024-8789 actively exploited?

No active exploitation of CVE-2024-8789 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-8789 be exploited remotely?

Yes. CVE-2024-8789 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-8789?

CVE-2024-8789 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2024-8789

HIGH

CVE-2024-8789

CWE-1333Published: March 20, 2025· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

Lunary-ai/lunary version git 105a3f6 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack. The application allows users to upload their own regular expressions, which are then executed on the server side. Certain regular expressions can have exponential runtime complexity relative to the input size, leading to potential denial of service. An attacker can exploit this by submitting a specially crafted regular expression, causing the server to become unresponsive for an arbitrary length of time.

NVD Source

Technical Analysis

CVE-2024-8789 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.