CVE-2026-120194
Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
- Record
CVE-2026-120194- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-06
EUVDEUVD-2026-114712
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
- Record
EUVD-2026-114712- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-06
GitHub AdvisoriesGHSA-pc2w-7g9p-pr43
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter...
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
- Record
GHSA-pc2w-7g9p-pr43- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
NVD
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
- Record
CVE-2026-120194- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-06
OSVDEBIAN-CVE-2026-120194
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
- Record
DEBIAN-CVE-2026-120194- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-05
OSVUBUNTU-CVE-2026-120194
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
- Record
UBUNTU-CVE-2026-120194- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-05
OSVAZL-112750 No score
CVE-2026-120194 affecting package json-glib 1.8.0-1
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
- Record
AZL-112750- Updated
- 2026-11-07
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
json-glibAzure Linux:3 |
through 1.8.0-1 | None known |
json-glibDebian:12 |
All versions, plus listed versions 1.10.0+ds-11.10.0+ds-21.10.0+ds-31.10.6+ds-11.10.6+ds-2 Show 6 moreShow less1.10.6+ds-31.10.8+ds-11.10.8+ds-21.6.6-11.8.0-11.8.0-2 |
None known |
json-glibDebian:13 |
All versions, plus listed versions 1.10.6+ds-21.10.6+ds-31.10.8+ds-11.10.8+ds-2 |
None known |
json-glibDebian:14 |
All versions, plus listed versions 1.10.6+ds-21.10.6+ds-31.10.8+ds-11.10.8+ds-2 |
None known |
json-glibUbuntu:16.04:LTS |
All versions, plus listed versions 1.0.4-21.1.2-0ubuntu1 |
None known |
json-glibUbuntu:18.04:LTS |
All versions, plus listed versions 1.2.8-11.4.2-21.4.2-31.4.2-3ubuntu0.18.04.1 |
None known |
json-glibUbuntu:20.04:LTS |
All versions, plus listed versions 1.4.4-21.4.4-2ubuntu11.4.4-2ubuntu2 |
None known |
json-glibUbuntu:22.04:LTS |
All versions, plus listed versions 1.6.2-11.6.2-1build11.6.6-11.6.6-1build1 |
None known |
json-glibUbuntu:24.04:LTS |
All versions, plus listed versions 1.8.0-11.8.0-21.8.0-2build11.8.0-2build2 |
None known |
json-glibUbuntu:26.10 |
All versions, plus listed versions 1.10.8+ds-2 |
None known |
json-glibUbuntu:26.04:LTS |
All versions, plus listed versions 1.10.8+ds-11.10.8+ds-2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | CVE List, EUVD, NVD, OSV | |
| products | CVE List, EUVD, NVD, OSV | |
| affected, aliases, facts, references | EUVD, OSV | |
| affected, aliases, products, references | CVE List, NVD | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-120194 is a high vulnerability (CVSS 7.5) in Red Hat Enterprise Linux 10, published October 31, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. No source names a fixed version.
References
access.redhat.com/security/cve/CVE-2026-120194
bugzilla.redhat.com/show_bug.cgi?id=2564418
gitlab.gnome.org/GNOME/json-glib/-/issues/96
nvd.nist.gov/vuln/detail/CVE-2026-120194
github.com/advisories/GHSA-pc2w-7g9p-pr43
security-tracker.debian.org/tracker/CVE-2026-120194
ubuntu.com/security/CVE-2026-120194
cve.org/CVERecord?id=CVE-2026-120194