Skip to content
Threat Feed
Subscribe

Vendor

Rouille

1 brief RSS
high advisory

Rouille HTTP Server Framework Vulnerable to Request Smuggling (CVE-2026-67181)

Rouille HTTP server framework versions 0.3.3 through 3.6.2 are vulnerable to an HTTP request smuggling attack, CVE-2026-67181, allowing remote attackers to desynchronize HTTP message boundaries by exploiting improper header forwarding in the proxy implementation, leading to potential bypassing of security controls or unauthorized access.

Rouille 0.3.3 through 3.6.2 web-vulnerability http-request-smuggling server-side
1r 1t 1c