Skip to content
Threat Feed
Subscribe

Vendor

Headroom

1 brief RSS
critical advisory

Authentication Bypass in Headroom LLM Proxy via Header Spoofing

The Headroom LLM proxy improperly derives memory ownership from the unauthenticated 'x-headroom-user-id' request header, allowing attackers to perform unauthorized read and write operations on arbitrary user LLM memory.

LLM proxy identity-spoofing cve web-application-vulnerability web-application ssrf vulnerability
2r 2t 1c