CVE-2026-67607

MEDIUM 5.9

LightFTP 2.3.1 Race Condition DoS via worker_thread_cleanup

CVSS Score

5.9

EPSS Score

0.0%

EPSS Percentile

0th

LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fresh connection that reuses the FTP context against an in-progress ABRT cleanup. Attackers can exploit the unprotected re-check of WorkerThreadId between worker_thread_cleanup() and pthread_join() outside of MTLock to cause pthread_join() to operate on an invalid thread ID, resulting in a server crash. CVE-2024-11144 identifies an incomplete fix of this vulnerability.

CWE	CWE-367
Vendor	hfiref0x
Product	lightftp
Published	Jul 31, 2026

Stay Ahead of the Next One

Get instant alerts for hfiref0x lightftp

Be the first to know when new medium vulnerabilities affecting hfiref0x lightftp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

hfiref0x / LightFTP

0 ≤ 2.3.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/zeroscience/tuktam#real-world-case-study-lightftp-cve-2024-11144 vulncheck.com: https://www.vulncheck.com/advisories/lightftp-race-condition-dos-via-worker-thread-cleanup

Credits

Gjoko Krstic of Zero Science Lab