CVE-2026-112921: Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request

As cited

Copy frozen at 2026-10-21 23:22 UTC (site build).

vulnerabilities

CVE-2026-112921: Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request

CVE-2026-112921 affects Robots::Validate for Perl in versions from 0.4.3 before 0.4.10, where User-Agent matcher state carries over from a previous request, causing legitimate clients to be incorrectly flagged as imposter robots. The vulnerability stems from improper state management between consecutive HTTP requests.

Why it matters: Perl application maintainers using Robots::Validate must update to version 0.4.10 or later to prevent false positive bot detection that could block legitimate users or clients.

Source published

2026-10-21 22:00 UTC

First seen by Cybersecurity Tracker

2026-10-21 22:40 UTC