CVE-2026-31866

CVE-2026-31866 affects the flagd feature flag daemon (prior to v0.14.2). The vulnerability is that the evaluation endpoints (OFREP /ofrep/v1/evaluate/… and gRPC evaluation.v1/v2) accept request bodies with no size limit, reading the evaluation context into memory and enabling an attacker to send ...