Skip to content
Threat Feed
Subscribe

Product

FastAPI (< 1.0.1)

1 brief RSS
high advisory

Starlette Framework Authentication Bypass Vulnerability (CVE-2026-48710)

CVE-2026-48710, also known as BadHost, is an authentication bypass vulnerability affecting the Starlette framework before version 1.0.1, and related frameworks like FastAPI, vLLM, and LiteLLM, due to a lack of input sanitization on host header paths, potentially allowing attackers to access sensitive data and steal credentials.

Starlette framework +4 authentication bypass web application asgi
2r 1t 1c updated