secwest.net

BadHost: One Char Bypasses Host-Based Security Across the Python AI Stack (opens in new tab)

Covers CVE-2026-48710 Starlette Host-Header Auth BypassCovered by 6 sources See all sources covering this story including DEV Community, infoworld.comDiscussed on Hacker News

Security Advisory

Read the original article
Sign in to keep reading the full article.
Sign UpLog In

Covered in 6 articles

DEV Community·

CVE-2026-48710: CVE-2026-48710: Starlette BadHost HTTP Host-Header Path-Poisoning and Authentication Bypass

Discussed on DEV
Feeds
infoworld.com·

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

Feeds
InfoQ·

BadHost Vulnerability Exposes AI Agents, Evaluators, and LLM Gateways

Feeds
View all 6 ›

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help