Is CVE-2026-116132 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-116132 being exploited in the wild.

How severe is CVE-2026-116132?

Informational severity, published 28 October 2026.

Which products and versions are affected?

Libwww-Perl HTTP::Body before 1.23_01.

How is CVE-2026-116132 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-116132?

Check whether you run Libwww-Perl HTTP::Body at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-116132: HTTP::Body temporary file disclosure in incomplete multipart uploads

CVE-2026-116132 · Severity: info · Published 2026-10-28

HTTP::Body is a Perl library that processes file uploads sent via multipart HTTP requests. When a client sends an incomplete upload request, the library leaves behind temporary files on the server's disk that were never delivered to the application. An attacker can repeatedly send incomplete uploads to fill up the temporary directory with orphaned files, potentially causing disk exhaustion or exposing sensitive data if those temporary files are not cleaned up.

Technologies: Libwww-Perl HTTP::Body. Vendors: Libwww-Perl.

Quick answers

Is CVE-2026-116132 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-116132 being exploited in the wild.
How severe is CVE-2026-116132?: Informational severity, published 28 October 2026.
Which products and versions are affected?: Libwww-Perl HTTP::Body before 1.23_01.
Is there a fix for CVE-2026-116132?: Yes: fixed in 1.23_01. Until then: Ensure the temporary directory has sufficient disk space monitoring and quota enforcement to detect abnormal growth. Regularly audit the temporary directory for orphaned files created by incomplete uploads.</anigation> <parameter name="timeline">[{"kind": "disclosed", "at": "2026-10-28"}] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-116132 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-116132?: Check whether you run Libwww-Perl HTTP::Body at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 1.23_01

Ensure the temporary directory has sufficient disk space monitoring and quota enforcement to detect abnormal growth. Regularly audit the temporary directory for orphaned files created by incomplete uploads.</anigation> <parameter name="timeline">[{"kind": "disclosed", "at": "2026-10-28"}]

Technical details

The vulnerability occurs in the multipart parser: temporary files are created immediately when a file part starts, but are only added to the tracked upload list when the part completes. If the HTTP body ends mid-upload, the temporary file remains on disk and is never tracked by the cleanup mechanism. An attacker can exploit this via network by sending crafted multipart requests that terminate inside a file part, leaving one orphaned temporary file per request with no recovery mechanism.

Affected products

libwww-perl HTTP::Body before 1.23_01

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.