LLMMedium
CVE-2026-23842: ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot ve…
- Occurred
- Jan 19, 2026
- Published
- Jan 19, 2026
- Source
- NVD CVE
Summary
ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot versions up to 1.2.10 are vulnerable to a denial-of-service condition caused by improper database session and connection pool management. Concurrent invocations of the get_response() method can exhaust the underlying SQLAlchemy connection pool, resulting in persistent service unavailability and requiring a manual restart to recover. Version 1.2.11 fixes the issue.
Tags
- CVE
- CVE-2026-23842
- cvss:HIGH
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Chatbot library vulnerability causes denial-of-service via connection pool exhaustion.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8