What is CVE-2026-55688?

CVE-2026-55688 is a medium-severity vulnerability in Asynchttpclient Async-http-client, classified under CWE-1275. CVSS score: 4.0/10. Published 2026-07-01.

How severe is CVE-2026-55688?

Medium severity. CVSS v3 base score is 4.0 out of 10.

Vulnerability in Asynchttpclient Async-http-client

CVE-2026-55688

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In versions from 2.0.0 prior to 2.16.0 and from 3.0.0.Beta1 prior to 3.0.11, ThreadSafeCookieStore stored…

CVSS v3 metric

CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N.

Affected products

Asynchttpclient Async-http-client — versions >= 2.0.0, < 2.16.0, >= 3.0.0.Beta1, < 3.0.11

Weakness classification (CWE)

CWE-1275

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-55688?: CVE-2026-55688 is a medium-severity vulnerability in Asynchttpclient Async-http-client, classified under CWE-1275. CVSS score: 4.0/10. Published 2026-07-01.
How severe is CVE-2026-55688?: Medium severity. CVSS v3 base score is 4.0 out of 10.