CVE-2026-85014 - undici vulnerable to Denial of Service via WebSocketStream unclean close

Back Back to CVE browser

HIGH

undici vulnerable to Denial of Service via WebSocketStream unclean close

Published Sep 4, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.37%

Description

undici's experimental WebSocketStream client crashes the whole Node.js process when a remote peer closes the TCP connection without a WebSocket close handshake. On an unclean close the internal socket-close handler calls abort on the writable stream unconditionally and discards the returned promise, but per the WHATWG Streams standard aborting a locked writable returns a promise that rejects with a TypeError. Because the application holds a writer on that writable, which is the only way to write, the rejection is never observed and Node's default unhandled-rejection behavior terminates the process. An untrusted server can therefore crash a client with a single abrupt disconnect, with no authentication and no application mistake. This affects undici versions from 7.0.0 up to 7.29.1 and from 8.0.0 up to 8.10.2. Users should upgrade to undici 7.29.1 or 8.10.2.

Affected products

Vendor Undici Product Undici Default
unaffected
- Version
  7.0.0
  Status
  affected
  Constraints
  <7.29.1
- Version
  8.0.0
  Status
  affected
  Constraints
  <8.10.2
- Version
  7.29.1
  Status
  unaffected
  Constraints
  -
- Version
  8.10.2
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Undici

unaffected

Version	Status	Constraints
7.0.0	affected	<7.29.1
8.0.0	affected	<8.10.2
7.29.1	unaffected	-
8.10.2	unaffected	-

Red Hat Hardened Images

grafana12-4-main-12.4.10-0.2.hum1

Fixed · RHSA-2026:66008
Red Hat Hardened Images

nodejs24-main-11.16.0-1.24.18.1.0.2.2.hum1

Fixed · RHSA-2026:54438
Red Hat Hardened Images

nodejs26-main-26.7.0-1.5.2.hum1

Fixed · RHSA-2026:54389
Exploit Intelligence

exploit-intelligence/vulnerability-analysis-rhel9

Out of support scope
OpenShift Pipelines

openshift-pipelines/pipelines-console-plugin-pf5-rhel9

Fix deferred
OpenShift Pipelines

openshift-pipelines/pipelines-console-plugin-rhel9

Fix deferred
Red Hat AMQ Broker 7

amq-broker-bin.zip

Fix deferred
Red Hat AMQ Broker 7

amq-broker-maven-repository.zip

Fix deferred
Red Hat Ansible Automation Platform 2

automation-platform-ui

Fix deferred
Red Hat Build of Podman Desktop

rh-podman-desktop.git

Fix deferred
Red Hat Developer Hub

rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend

Fix deferred
Red Hat Developer Hub

rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend

Fix deferred
Red Hat Developer Hub

rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki

Fix deferred
Red Hat Developer Hub

rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator

Fix deferred
Red Hat Developer Hub

rhdh/rhdh-hub-rhel9

Fix deferred
Red Hat Enterprise Linux 10

grafana

Fix deferred
Red Hat Enterprise Linux 10

nodejs22

Fix deferred
Red Hat Enterprise Linux 10

nodejs24

Fix deferred
Red Hat Enterprise Linux 10

nodejs26

Fix deferred
Red Hat Enterprise Linux 10

ubi10/nodejs-24

Fix deferred
Red Hat Enterprise Linux 10

ubi10/nodejs-24-minimal

Fix deferred
Red Hat Enterprise Linux 8

nodejs:22/nodejs

Fix deferred
Red Hat Enterprise Linux 8

nodejs:24/nodejs

Fix deferred
Red Hat Enterprise Linux 8

ubi8/nodejs-24

Fix deferred
Red Hat Enterprise Linux 8

ubi8/nodejs-24-minimal

Fix deferred
Red Hat Enterprise Linux 9

nodejs:22/nodejs

Fix deferred
Red Hat Enterprise Linux 9

nodejs:24/nodejs

Fix deferred
Red Hat Enterprise Linux 9

nodejs:26/nodejs

Fix deferred
Red Hat Enterprise Linux 9

ubi9/nodejs-24

Fix deferred
Red Hat Enterprise Linux 9

ubi9/nodejs-24-minimal

Fix deferred
Red Hat Hardened Images

jaeger

Not affected
Red Hat Hardened Images

nodejs25

Will not fix
Red Hat Hardened Images

prometheus3.13

Not affected
Red Hat Hardened Images

rust

Not affected
Red Hat OpenShift AI (RHOAI)

rhoai/odh-core-bff-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-dashboard-operator-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-dashboard-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mlflow-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mod-arch-agent-ops-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mod-arch-automl-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mod-arch-autorag-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mod-arch-eval-hub-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mod-arch-gen-ai-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mod-arch-maas-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mod-arch-mlflow-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mod-arch-model-registry-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9

Fix deferred
Red Hat OpenShift Container Platform 4

openshift4/ose-monitoring-plugin-rhel9

Fix deferred
Red Hat OpenShift Container Platform 4

wasmedge

Fix deferred
Red Hat OpenShift Dev Spaces

devspaces/code-rhel9

Fix deferred
Red Hat OpenShift Dev Spaces

devspaces/dashboard-rhel9

Fix deferred
Red Hat OpenShift Dev Spaces

devspaces/openvsx-rhel9

Fix deferred
Red Hat OpenShift Dev Spaces

devspaces/pluginregistry-rhel9

Fix deferred
Red Hat Openshift Data Foundation 4

odf4/mcg-core-rhel9

Fix deferred
Red Hat Openshift Data Foundation 4

odf4/ocs-client-console-rhel9

Fix deferred
Red Hat Openshift Data Foundation 4

odf4/odf-console-rhel9

Fix deferred
Red Hat Openshift Data Foundation 4

odf4/odf-multicluster-console-rhel9

Fix deferred
Red Hat Trusted Artifact Signer

rhtas/rhtas-console-ui-rhel9

Out of support scope
Secrets Management Console for Red Hat OpenShift

external-secrets-management/console-plugin-rhel9

Out of support scope
Self-service automation portal 2

ansible-automation-platform/automation-portal

Fix deferred
Self-service automation portal 2

ansible-automation-platform/bootc-automation-portal-rhel9

Fix deferred

Product	Package	State	Advisory
Red Hat Hardened Images	grafana12-4-main-12.4.10-0.2.hum1	Fixed	RHSA-2026:66008
Red Hat Hardened Images	nodejs24-main-11.16.0-1.24.18.1.0.2.2.hum1	Fixed	RHSA-2026:54438
Red Hat Hardened Images	nodejs26-main-26.7.0-1.5.2.hum1	Fixed	RHSA-2026:54389
Exploit Intelligence	exploit-intelligence/vulnerability-analysis-rhel9	Out of support scope	n/a
OpenShift Pipelines	openshift-pipelines/pipelines-console-plugin-pf5-rhel9	Fix deferred	n/a
OpenShift Pipelines	openshift-pipelines/pipelines-console-plugin-rhel9	Fix deferred	n/a
Red Hat AMQ Broker 7	amq-broker-bin.zip	Fix deferred	n/a
Red Hat AMQ Broker 7	amq-broker-maven-repository.zip	Fix deferred	n/a
Red Hat Ansible Automation Platform 2	automation-platform-ui	Fix deferred	n/a
Red Hat Build of Podman Desktop	rh-podman-desktop.git	Fix deferred	n/a
Red Hat Developer Hub	rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend	Fix deferred	n/a
Red Hat Developer Hub	rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend	Fix deferred	n/a
Red Hat Developer Hub	rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki	Fix deferred	n/a
Red Hat Developer Hub	rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator	Fix deferred	n/a
Red Hat Developer Hub	rhdh/rhdh-hub-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux 10	grafana	Fix deferred	n/a
Red Hat Enterprise Linux 10	nodejs22	Fix deferred	n/a
Red Hat Enterprise Linux 10	nodejs24	Fix deferred	n/a
Red Hat Enterprise Linux 10	nodejs26	Fix deferred	n/a
Red Hat Enterprise Linux 10	ubi10/nodejs-24	Fix deferred	n/a
Red Hat Enterprise Linux 10	ubi10/nodejs-24-minimal	Fix deferred	n/a
Red Hat Enterprise Linux 8	nodejs:22/nodejs	Fix deferred	n/a
Red Hat Enterprise Linux 8	nodejs:24/nodejs	Fix deferred	n/a
Red Hat Enterprise Linux 8	ubi8/nodejs-24	Fix deferred	n/a
Red Hat Enterprise Linux 8	ubi8/nodejs-24-minimal	Fix deferred	n/a
Red Hat Enterprise Linux 9	nodejs:22/nodejs	Fix deferred	n/a
Red Hat Enterprise Linux 9	nodejs:24/nodejs	Fix deferred	n/a
Red Hat Enterprise Linux 9	nodejs:26/nodejs	Fix deferred	n/a
Red Hat Enterprise Linux 9	ubi9/nodejs-24	Fix deferred	n/a
Red Hat Enterprise Linux 9	ubi9/nodejs-24-minimal	Fix deferred	n/a
Red Hat Hardened Images	jaeger	Not affected	n/a
Red Hat Hardened Images	nodejs25	Will not fix	n/a
Red Hat Hardened Images	prometheus3.13	Not affected	n/a
Red Hat Hardened Images	rust	Not affected	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-core-bff-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-dashboard-operator-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-dashboard-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mlflow-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mod-arch-agent-ops-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mod-arch-automl-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mod-arch-autorag-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mod-arch-eval-hub-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mod-arch-gen-ai-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mod-arch-maas-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mod-arch-mlflow-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mod-arch-model-registry-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift Container Platform 4	openshift4/ose-monitoring-plugin-rhel9	Fix deferred	n/a
Red Hat OpenShift Container Platform 4	wasmedge	Fix deferred	n/a
Red Hat OpenShift Dev Spaces	devspaces/code-rhel9	Fix deferred	n/a
Red Hat OpenShift Dev Spaces	devspaces/dashboard-rhel9	Fix deferred	n/a
Red Hat OpenShift Dev Spaces	devspaces/openvsx-rhel9	Fix deferred	n/a
Red Hat OpenShift Dev Spaces	devspaces/pluginregistry-rhel9	Fix deferred	n/a
Red Hat Openshift Data Foundation 4	odf4/mcg-core-rhel9	Fix deferred	n/a
Red Hat Openshift Data Foundation 4	odf4/ocs-client-console-rhel9	Fix deferred	n/a
Red Hat Openshift Data Foundation 4	odf4/odf-console-rhel9	Fix deferred	n/a
Red Hat Openshift Data Foundation 4	odf4/odf-multicluster-console-rhel9	Fix deferred	n/a
Red Hat Trusted Artifact Signer	rhtas/rhtas-console-ui-rhel9	Out of support scope	n/a
Secrets Management Console for Red Hat OpenShift	external-secrets-management/console-plugin-rhel9	Out of support scope	n/a
Self-service automation portal 2	ansible-automation-platform/automation-portal	Fix deferred	n/a
Self-service automation portal 2	ansible-automation-platform/bootc-automation-portal-rhel9	Fix deferred	n/a

Ecosystem	Package	Introduced	Fixed
npm	undici	7.0.0	7.29.1
npm	undici	8.0.0	8.10.2

Remediation

Red Hat statement

This Moderate impact flaw in the `undici` library's experimental `WebSocketStream` client can lead to a denial of service. An untrusted remote server can crash a vulnerable Node.js client application by abruptly closing a TCP connection without a WebSocket handshake. This affects the availability of applications utilizing `undici` in Red Hat products.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Weaknesses (3)

CWE-248

CWE-390

CWE-754

References (12)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-85014		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2528712		Issue Tracking
https://cna.openjsf.org/security-advisories.html		Third Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-71465		Advisory
https://github.com/advisories/GHSA-rx4f-c7p8-82vq		Advisory
https://github.com/nodejs/undici/commit/1858656ebb1e919311c1f31613dfd581b7214349
https://github.com/nodejs/undici/commit/662d0ea671fe64139e79533c913fce412765e1d7
https://github.com/nodejs/undici/releases/tag/v7.29.1
https://github.com/nodejs/undici/releases/tag/v8.10.2
https://github.com/nodejs/undici/security/advisories/GHSA-rx4f-c7p8-82vq		Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-85014
https://www.cve.org/CVERecord?id=CVE-2026-85014