CVE-2026-48710

Published May 26, 2026

Last updated 16 days ago

Exploit known CVSS medium 6.5

Network

Port (443)

HTTP

Starlette

Overview

Description: Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope["server"]` for malformed values.
Source: security-advisories@github.com
NVD status: Analyzed
Products: starlette, ai_inference_server, ansible_automation_platform, migration_toolkit_for_applications, openshift_ai, openshift_lightspeed, satellite, enterprise_linux_ai

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.5
Impact score: 2.5
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity: MEDIUM

Known exploits

Data from CISA

Vulnerability name: Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Exploit added on: Sep 2, 2026
Exploit action due: Sep 16, 2026
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weaknesses

security-advisories@github.com: CWE-444
0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-1289

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:encode:starlette:*:*:*:*:*:python:*:*",
            "matchCriteriaId": "4C7C6045-86A6-4FAC-AE15-B12438E9D1B4",
            "versionEndExcluding": "1.0.1",
            "versionStartIncluding": "0.8.3",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:redhat:ai_inference_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "3BB03728-80D6-488F-A961-883B77B055EA",
            "versionEndIncluding": "3.3.5",
            "versionStartIncluding": "3.3.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:ansible_automation_platform:2.6:-:*:*:*:*:*:*",
            "matchCriteriaId": "49F4FF35-8D34-4A57-AA85-0953FF95A2DA",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:ansible_automation_platform:2.7:-:*:*:*:*:*:*",
            "matchCriteriaId": "DC59D996-1B24-462E-AB21-FFD53F909B40",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:migration_toolkit_for_applications:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "4EE14B60-A259-41E7-A799-BB01D1DDF4A5",
            "versionEndExcluding": "8.2.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "84CC25BD-1C5F-4BBE-AE16-C424788B82E3",
            "versionEndExcluding": "3.3.5",
            "versionStartIncluding": "3.3",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "F1672580-DC29-4486-AB27-B86A37BE7BD1",
            "versionEndExcluding": "3.4.2",
            "versionStartIncluding": "3.4",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:openshift_lightspeed:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "C34B05C8-C19C-497F-8E1D-8F6039CDB185",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:satellite:6.17:*:*:*:*:*:*:*",
            "matchCriteriaId": "342183ED-1495-4481-9164-B3ED8424B618",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:satellite:6.18:*:*:*:*:*:*:*",
            "matchCriteriaId": "C2205338-7476-46DC-ABB2-52F0BBAAD01D",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:satellite:6.19:*:*:*:*:*:*:*",
            "matchCriteriaId": "BCFB23DD-F6A0-4CDB-98E8-E072C104ED4B",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_ai:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId": "531FF57A-65AE-482C-9A43-D1F2ECAD6ED0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

Related CVEs

References