CVE-2026-49866: Unbounded Rpc Message Limit Infinitycve-2026-49866-unbounded-rpc-message-limit-infinity
Setting RPC or network message limits (e.g., maxIhaveMessageIDs, maxMessages) to Infinity removes bounds-checking for excessive input. This unbounded configuration allows an attacker to send oversized payloads that trigger unbounded synchronous iteration or unbounded memory consumption, potentially blocking the event loop and leading to a Denial of Service (
