CVE-2026-120399
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Nov 10, 2026
Vendor
unknown
Description
A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.