Tools AI-Found Vulnerability Register aifv-0076
Register entry
iperf3 server use-after-free, found by Anthropic's Claude
- CVE
- CVE-2026-101276
- Project
- iperf3 (ESnet)
- Component
- iperf_server_api.c, server_timer_proc()
- Finder
- Anthropic (Claude)
- Model
- Claude (version unstated)
- Autonomy
- Anthropic is named as finder and Ada Logics as reporter; the release note thanks Claude and Ada Logics for finding and reporting it
- Evidence tier
- Credits array names the finder
- Assigner
- Anthropic
- Severity
- 9.2 Critical (CVSS 4.0)
- Bounty
- None published
- Confidence
- CONFIRMED
What happened
A remote, unauthenticated heap use-after-free in the iperf3 server: the per-test watchdog frees streams without stopping their worker threads, so a blocked worker reads a freed stream. It affects iperf3 3.21 and is fixed in 3.22. Anthropic published the record as CNA on 30 September 2026, the day after iperf 3.22 shipped, with Anthropic credited as finder.
Credit as recorded: finder: "Anthropic"; reporter: "Ada Logics". iperf 3.22 release notes: "Thanks to Claude and Ada Logics for finding and reporting two potential security vulnerabilities". The iperf 3.22 release notes pair the two identifiers the other way round from the CVE records, listing this flaw as ANT-2026-E5BA80X9 / CVE-2026-101283. This row follows the CVE record's own description, the record Anthropic published as CNA. The release note names the model only as Claude. Date basis: datePublished.
Sources
- CVE record, cvelistV5 mirrorraw.githubusercontent.com/CVEProject/cvelistV5/main/cves/202…
- iperf 3.22 release notes (29 September 2026)raw.githubusercontent.com/esnet/iperf/3.22/RELNOTES.md
One record from the AI-Found Vulnerability Register, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 8 October 2026