UnrealIRCd 6.2.7.1 released with hot-patch for label tag escaping bug (CVE-2026-114713)
The escaping bug allows injecting arbitrary commands into IRC server traffic using the label message tag.
50
CVE-2026-114713
Label tag injection in UnrealIRCd before 6.2.7.1
- CVSS 3.1
- 8.6 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
The labeled-response module in UnrealIRCd does not escape the IRCv3 label message tag when echoing it into replies. Any user on a network with two or more linked servers can trigger it by sending the label message. Attackers gain ability to inject server-to-server commands executed with server authority. This affects users on networks running vulnerable UnrealIRCd versions.
What to do: Upgrade UnrealIRCd to 6.2.7.1
| Product | Affected | Fixed in |
|---|---|---|
| UnrealIRCd | 6.0.0 before 6.2.7.1 | 6.2.7.1 |
Estimated exposure
nicheNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.
- Weakness
- CWE-140
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N