arstechnica.com

Millions of AI agents imperiled by critical vulnerability in open source package (opens in new tab)

Covers CVE-2026-48710 Starlette Host-Header Auth BypassCovered by 13 sources including tldr.tech, TechRadarDiscussed on Hacker News, Hacker News, Hacker News, r/LocalLLaMA, and r/Python

"BadHost" was found in Starlette, a package with 325 million weekly downloads.

Read the original article

Sign in to keep reading the full article.

Covered in 15 articles

Seedworm DLL Attack 🐛, Gitea Image Leak Bug 📦, Starlette ASGI Flaw 🤖

·

Worrying open-source security issue 'BadHost' could affect millions of AI agents, experts warn

not much happened today

View all 15 ›