CVE-2026-48710 Starlette Host-Header Auth Bypass (opens in new tab)

Covered by 3 sources including arstechnica.com, firethering.comDiscussed on Hacker News

Scan your Starlette or FastAPI server for CVE-2026-48710 (BadHost): a critical auth bypass via Host header injection affecting MCP servers, LLM proxies, AI agent frameworks, and thousands of Python ASGI applications.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

arstechnica.com·

Millions of AI agents imperiled by critical vulnerability in open source package

Discussed on Hacker News, Hacker News, Hacker News, r/LocalLLaMA, and r/Python

firethering.com·

A Critical Bug in a 325M-Download Package Put Millions of AI Agents at Risk

Discussed on Hacker News

In other languages

Les news de Korben·

Covered in 3 articles

Millions of AI agents imperiled by critical vulnerability in open source package

A Critical Bug in a 325M-Download Package Put Millions of AI Agents at Risk

In other languages

BadHost - Un caractère et votre agent IA passe à l'ennemi