# CVE-2026-45290: Cloudburst Network DoS in RakNet connection handling

Source: https://junglewise.ai/threats/cve-2026-45290-cloudburst-network-dos-in-raknet-connection-handling  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-05. Updated: 2026-06-05  
License: CC BY 4.0 with a link back

CVE-2026-45290 · Severity: high · CVSS 7.5 · Published 2026-06-05

Cloudburst Network is a library used to handle network communications for software projects, including the Geyser Minecraft bridge. A flaw in how the library handles incoming connections allows a remote attacker to freeze the software's networking system. This results in a total service outage where the application becomes unresponsive to all users.

Technologies: [CloudburstMC Network](https://junglewise.ai/threats/technologies/network). Vendors: [CloudburstMC](https://junglewise.ai/threats/vendors/cloudburstmc).

## Quick answers

**Is CVE-2026-45290 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-45290 being exploited in the wild.

**How severe is CVE-2026-45290?** High severity, with a CVSS score of 7.5, published 5 June 2026.

**Which products and versions are affected?** CloudburstMC Network < 1.0.0.CR3-20260417.085727-30.

**Is there a fix for CVE-2026-45290?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-45290 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-45290?** Check whether you run CloudburstMC Network at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A denial-of-service (DoS) vulnerability exists in Cloudburst Network (specifically the netty-transport-raknet component) due to missing bound checks during RakNet connection handling. By sending specially crafted packets, a remote, unauthenticated attacker can trigger a condition that stalls the Netty event loop. Because the event loop is responsible for processing I/O tasks, stalling it renders the entire network stack inoperable for the affected application. The vulnerability is classified as CWE-770 (Allocation of Resources Without Limits or Throttling). Users should update to version 1.0.0.CR3-20260417.085727-30 or later; Geyser users should update to Build #1114 or higher.

## Affected products

- CloudburstMC Network (netty-transport-raknet) < 1.0.0.CR3-20260417.085727-30

## Timeline

- 2026-05-12: advisory: GitHub Security Advisory published
- 2026-06-05: disclosed: NVD publication date

## References

- [https://github.com/CloudburstMC/Network/security/advisories/GHSA-7x5h-rg5x-9gf3](https://github.com/CloudburstMC/Network/security/advisories/GHSA-7x5h-rg5x-9gf3)

## Related threats

- [Cloudburst Network denial of service via parent Netty channel closure](https://junglewise.ai/threats/cve-2026-45291-cloudburst-network-denial-of-service-via-parent-netty-channel)