The identified issue is a denial‑of‑service vulnerability in Perspective 5.0.0 that allows an attacker to submit a crafted TableMakeViewReq message containing an unbounded for or while loop. When the server evaluates the expression for each table row, the Tornado IOLoop can become blocked indefinitely, without any iteration limit or cancellation check, leaving the service unresponsive to all clients. This weakness corresponds to CWE‑770 and results in a loss of availability for the affected service.

The affected product is Perspective, developed by perspective‑dev. Version 5.0.0 is impacted. No other versions are listed in the vendor disclosure.

The CVSS score of 7.1 indicates a high severity for remote denial‑of‑service. Because no EPSS score is available and the vulnerability is not listed in CISA’s KEV catalog, the likelihood of widespread exploitation is uncertain, though the expression evaluation could be performed over the network if the corresponding API endpoint is exposed. The attack requires the ability to send a crafted TableMakeViewReq request, which is remotely available, meaning a remote attacker can trigger the loop and block the event loop permanently until a manual restart occurs.