Wildfly GSS Token Decoder Memory Exhaustion Flaw

CVE-2026-15567 is a remote denial-of-service vulnerability in Wildfly's CSIv2Util component that stems from improper input validation in GSS token processing. An unauthenticated attacker can exploit an unbounded length field in the GSS token decoder to trigger an OutOfMemoryError by requesting allocation of extremely large byte arrays. This vulnerability matters because Wildfly is widely deployed in enterprise environments as a Java EE application server, and the lack of authentication requirement means any network-connected attacker can initiate the attack. Organizations running vulnerable Wildfly instances face service disruption, resource starvation, and potential cascading failures across dependent systems.

While this CVE lacks direct MITRE ATT&CK technique mappings, Casky's 754 security skills leverage Claude's extended reasoning to correlate this memory exhaustion pattern with Resource Exhaustion (T1499) and Service Stop/Restart abuse scenarios. Practitioners using Casky would observe detection findings centered on abnormal memory allocation patterns, detection of oversized or malformed CSIv2/GSS authentication requests, and resource consumption spikes preceding service failures. The platform's skill engine would flag the absence of bounds checking in deserialization logic and highlight the critical control gap that authentication bypass creates. Security teams would see actionable insights linking network telemetry of failed authentication attempts with abnormal heap utilization, enabling them to distinguish legitimate traffic from exploitation attempts targeting this specific decoder vulnerability.