CVE-2026-110594

BottleCRM versions 0.43 through 1.14.5 are vulnerable to a Regular Expression Denial of Service (ReDoS) . The flaw exists because the application evaluates unbounded routing rule regex patterns within the _match_condition() function during case saves. An authenticated organization administrator c...