BadHost – CVE-2026-48710: Starlette Host-Header Auth Bypass

Scan your Starlette or FastAPI server for CVE-2026-48710 (BadHost): a critical auth bypass via Host header injection affecting MCP servers, LLM proxies, AI agent frameworks, and thousands of Python ASGI applications.
114 points by ylk 149 days ago badhost.org 41 comments
Summary not yet generated for this article.

Original Text

https://arstechnica.com/information-technology/2026/05/milli...

Comments (41 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open