Vulnerability Details CVE-2026-29044
EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler determines `transaction_active=false` and only calls `withdraw_authorization_callback`. This path ultimately calls `Charger::deauthorize()`, but no actual stop (StopTransaction) occurs in the Charging state. As a result, authorization withdrawal can be defeated by timing, allowing charging to continue. Version 2026.02.0 contains a patch.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 9.4%
CVSS Severity
CVSS v3 Score 5.0
Products affected by CVE-2026-29044
-
cpe:2.3:o:linuxfoundation:everest:2022.11.0
-
cpe:2.3:o:linuxfoundation:everest:2022.12.0
-
cpe:2.3:o:linuxfoundation:everest:2022.12.1
-
cpe:2.3:o:linuxfoundation:everest:2023.1.0
-
cpe:2.3:o:linuxfoundation:everest:2023.10.0
-
cpe:2.3:o:linuxfoundation:everest:2023.12.0
-
cpe:2.3:o:linuxfoundation:everest:2023.2.0
-
cpe:2.3:o:linuxfoundation:everest:2023.2.1
-
cpe:2.3:o:linuxfoundation:everest:2023.3.0
-
cpe:2.3:o:linuxfoundation:everest:2023.5.0
-
cpe:2.3:o:linuxfoundation:everest:2023.6.0
-
cpe:2.3:o:linuxfoundation:everest:2023.7.0
-
cpe:2.3:o:linuxfoundation:everest:2023.8.0
-
cpe:2.3:o:linuxfoundation:everest:2023.9.0
-
cpe:2.3:o:linuxfoundation:everest:2023.9.1
-
cpe:2.3:o:linuxfoundation:everest:2024.1.0
-
cpe:2.3:o:linuxfoundation:everest:2024.10.0
-
cpe:2.3:o:linuxfoundation:everest:2024.11.0
-
cpe:2.3:o:linuxfoundation:everest:2024.2.0
-
cpe:2.3:o:linuxfoundation:everest:2024.3.0
-
cpe:2.3:o:linuxfoundation:everest:2024.3.1
-
cpe:2.3:o:linuxfoundation:everest:2024.4.0
-
cpe:2.3:o:linuxfoundation:everest:2024.5.0
-
cpe:2.3:o:linuxfoundation:everest:2024.6.0
-
cpe:2.3:o:linuxfoundation:everest:2024.7.0
-
cpe:2.3:o:linuxfoundation:everest:2024.7.1
-
cpe:2.3:o:linuxfoundation:everest:2024.8.0
-
cpe:2.3:o:linuxfoundation:everest:2024.9.0
-
cpe:2.3:o:linuxfoundation:everest:2024.9.1
-
cpe:2.3:o:linuxfoundation:everest:2024.9.2
-
cpe:2.3:o:linuxfoundation:everest:2025.1.0
-
cpe:2.3:o:linuxfoundation:everest:2025.10.0
-
cpe:2.3:o:linuxfoundation:everest:2025.12.0
-
cpe:2.3:o:linuxfoundation:everest:2025.12.1
-
cpe:2.3:o:linuxfoundation:everest:2025.2.0
-
cpe:2.3:o:linuxfoundation:everest:2025.3.0
-
cpe:2.3:o:linuxfoundation:everest:2025.4.0
-
cpe:2.3:o:linuxfoundation:everest:2025.4.1
-
cpe:2.3:o:linuxfoundation:everest:2025.5.0
-
cpe:2.3:o:linuxfoundation:everest:2025.6.0
-
cpe:2.3:o:linuxfoundation:everest:2025.7.0
-
cpe:2.3:o:linuxfoundation:everest:2025.8.0
-
cpe:2.3:o:linuxfoundation:everest:2025.9.0