CVE-2026-2641Disclosure

LOWCVSS 1.9 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in universal-ctags ctags up to 6.2.1. The affected element is the function parseExpression/parseExprList of the file parsers/v.c of the component V Language Parser. Executing a manipulation can lead to uncontrolled recursion. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-404CWE-674

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-18: 2Technical Details · 2026-02-18: 202-18
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-2641 Uncontrolled Recursion Vulnerability in Universal-ctags V Language Parser https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2641

    Post summary

    The entry announces CVE-2026-2641 as an uncontrolled recursion flaw in the Universal-ctags V Language Parser, but does not provide PoC, exploit, patch, or active exploitation details.

    0000038
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-2641 A weakness has been identified in universal-ctags ctags up to 6.2.1. The affected element is the function parseExpression/parseExprList of the file parsers/v.c of the c… https://www.cve.org/CVERecord?id=CVE-2026-2641

    Post summary

    A weakness was disclosed in universal-ctags ctags up to 6.2.1, affecting the parseExpression/parseExprList function in parsers/v.c, with no proof‑of‑concept, exploit, active exploitation, or patch information mentioned.

    00000156
    56.4K followersView on X

Explore more