CVE-2026-82439: Description The DRPC server kept a map from function name to request queue and created an entry the first time a functi

A DRPC server (a system for handling remote procedure calls, or requests to run functions on a distant computer) has a memory leak vulnerability where it keeps growing a map of function names even after requests are completed. Since function names come from clients and aren't validated against registered functions, an attacker can send unlimited unique function names to gradually exhaust the server's memory, and no credentials are required by default to exploit this.