Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper causes the server’s critical transaction‑apply thread to crash. An attacker who can write under the /zookeeper/quota subtree, which is world‑writable on default deployments, can force the crash, rendering the on‑disk data directory permanently unbootable. This failure makes the server unable to process any requests, resulting in a persistent denial of service and potential data loss.

Apache ZooKeeper versions up to and including 3.9.6 are affected. The vulnerable functionality resides in the quota component that manages write operations under the /zookeeper/quota subtree.

The CVSS score of 8.7 indicates a high severity vulnerability. While the EPSS score is not available, the lack of a KEV listing suggests limited public exploitation to date; however, the simplest attack vector relies on unauthenticated write access to a world‑writable path. An attacker does not need elevated privileges beyond local or network write capability to the quota subtree, making exploitation straightforward on default configurations.