Routinator crashes when encountering maliciously crafted RRDP XML files
Date: 2026-06
Affected: rust/routinator
Attack vector: dos
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2026-49235
CWE: CWE-400
CWE-755
CWE-776

When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator crashes.


Mitigations:

Architectural layers (MAESTRO):