TI-2026-76437 CVE-2026-111883 · GHSA-j73g-6444-cr8h
Cross-site request forgery in Locust lets attackers stop load tests
Priority MEDIUM 57
Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset.