← back
CVE-2026-48710mediumunder attackCWE-1289CWE-444

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

90Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 6.5epss 36%
from disclosure to weapon0 days
Published on NVDMay 26
1st PoCApr 1
CISA KEV+99d
exploitation probability
36%top 2% of all CVEs
observed exploitation
yesCISA + VulnCheck
6 public exploit(s)
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Affected
5 products (34 components)
Red Hat OpenShift AI (RHOAI) · Red Hat AI Inference Server · Red Hat Enterprise Linux AI (RHEL AI) 3 · OpenShift Lightspeed · Exploit Intelligence
workaround: Deploying an RFC-compliant reverse proxy (such as nginx, Apache, HAProxy, or Caddy) in front of the ASGI server will reject malformed Host headers before they reach the application…
Fixed
9 products (93 components)
Red Hat OpenShift AI 3.4 · Red Hat OpenShift AI 3.3 · Red Hat Ansible Automation Platform 2.6 · Red Hat Satellite 6.19 · Red Hat AI Inference Server 3.3 · and others 4
Not affected
7 products (948 components) — because the vulnerable code is not present in the product
Red Hat OpenShift AI 3.4 · Red Hat OpenShift AI 3.3 · Red Hat Ansible Automation Platform 2.6 · Red Hat Migration Toolkit for Applications 8.2 · Red Hat Ansible Automation Platform 2.7 · and others 2
Action required by CISAfederal deadline: 2026-09-16

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

In short

Starlette didn't properly validate the HTTP Host header, allowing attackers to craft malicious requests that make the URL path appear different from what was actually requested. This could bypass security checks that rely on the URL path.

Technical detail

The vulnerability exists in Starlette versions before 1.0.1 where the Host header is used to reconstruct request.url without RFC 9112/3986 validation. An attacker can send a malformed Host header to cause request.url.path to diverge from the actual routing path in scope, allowing bypass of path-based security middleware and endpoint restrictions that check request.url instead of raw scope values.

Summary generated and translated by AI from the official description.
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope["server"]` for malformed values.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Kludex · starlette
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.