CVE-2026-61854

The VoiceSentinel real-time voice moderation system (versions 2.2.1 to 3.3.1 ) is vulnerable to a race condition in its optional report buffer feature. The root cause is located in report_buffer.py, where _maybe_cleanup() uses an unlocked dictionary for cleanup throttling, allowing simultaneous _...

CVE-2026-61854 VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth

VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report buffer feature has a race between retention cleanup and normal transcript writes. In reportbuffer.py, maybecleanup uses an unlocked dictionary for once-per-hour cleanup...