Back to article
badhost.org

CVE-2026-48710 Starlette Host-Header Auth Bypass (opens in new tab)

Covered by 11 sources See all sources covering this story including DEV Community, infoworld.comDiscussed on Lobsters

Covered in 11 articles

DEV Community·

CVE-2026-48710: CVE-2026-48710: Starlette BadHost HTTP Host-Header Path-Poisoning and Authentication Bypass

Discussed on DEV
Feeds
infoworld.com·

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

Feeds
InfoQ·

BadHost Vulnerability Exposes AI Agents, Evaluators, and LLM Gateways

Feeds
secwest.net·

BadHost: One Char Bypasses Host-Based Security Across the Python AI Stack

Discussed on Hacker News
Feeds
csoonline.com·

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

Feeds
ostif.org·

Disclosing the BADHOST Vulnerability in Starlette

Discussed on Hacker News
Feeds
marcelotryle.com·

CVE-2026-48710: A Maintainer's Perspective

Discussed on Hacker News, Lobsters, and r/Python
Feeds
indiehacker.news·

#057 - Anthropic hits $30B ARR, DuckDuckGo jumps 28%, and one Host header bypasses every FastAPI MCP

Feeds
Metacurity·

Centcom: US war zone troops were targeted through commercial location data

Feeds
news.risky.biz·

Risky Bulletin: BadHost vulnerability bypasses authentication on AI infrastructure

Feeds

In other languages

Nyheter·

Miljoner AI-agenter påverkas av ny kritisk sårbarhet

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help