{"id":"CVE-2026-48710","title":"Starlette is a lightweight ASGI framework/toolkit","summary":"Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-444","CWE-1289"],"vendor":"encode","product":"starlette","affected":["starlette >= 0.8.3, < 1.0.1","ai_inference_server >= 3.3.0, <= 3.3.5","ansible_automation_platform = 2.6","ansible_automation_platform = 2.7","migration_toolkit_for_applications < 8.2.0","openshift_ai >= 3.3, < 3.3.5","openshift_ai >= 3.4, < 3.4.2","openshift_lightspeed","satellite = 6.17","satellite = 6.18","satellite = 6.19","enterprise_linux_ai = 3.0"],"patched":["starlette 1.0.1","migration_toolkit_for_applications 8.2.0","openshift_ai 3.4.2"],"published":"2026-05-26","updated":"2026-10-01","sourceUpdated":"2026-10-01T18:17:18.153","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-48710","references":[{"url":"https://badhost.org","label":"security-advisories@github.com"},{"url":"https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6","label":"security-advisories@github.com"},{"url":"https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr","label":"security-advisories@github.com"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml","label":"security-advisories@github.com"},{"url":"https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette","label":"security-advisories@github.com"},{"url":"https://www.secwest.net/starlette","label":"security-advisories@github.com"},{"url":"https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette","label":"security-advisories@github.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:22992","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:22993","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:23346","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:24866","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:26226","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:30088","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:30089","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:34456","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:34526","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:34532","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:37275","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:43038","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:44696","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:51357","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:60520","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:63337","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/security/cve/CVE-2026-48710","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2481742","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48710.json","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48710","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.wiz.io/blog/ai-infrastructure-honeypot","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https:/www.microsoft.com/en-us/security/blog/2026/08/26/when-ai-infrastructure-becomes-target-securing-gateways-control-points","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48710"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48710"},{"url":"https://github.com/Kludex/starlette"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},{"url":"https://access.redhat.com/errata/RHSA-2026:69466"},{"url":"https://access.redhat.com/errata/RHSA-2026:69467"},{"url":"https://access.redhat.com/errata/RHSA-2026:69464"},{"url":"https://access.redhat.com/errata/RHSA-2026:70965"},{"url":"https://access.redhat.com/errata/RHSA-2026:70979"},{"url":"https://access.redhat.com/errata/RHSA-2026:70969"},{"url":"https://access.redhat.com/errata/RHSA-2026:73987"},{"url":"https://access.redhat.com/errata/RHSA-2026:76150"},{"url":"https://access.redhat.com/errata/RHSA-2026:76149"},{"url":"https://access.redhat.com/errata/RHSA-2026:84734"}],"tags":["nvd","cve.org","in-the-wild","exploit-available","kev","osv","pip","csaf","vex","red-hat"],"exploited":true,"exploitAvailable":true,"ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-03T03:56:07.799548Z"},"epss":0.70288,"epssPercentile":0.99381,"kev":true,"kevDateAdded":"2026-09-02","kevDueDate":"2026-09-16","kevRansomware":false,"exploits":{"github":5,"githubRepos":["https://github.com/eris-ths/supply-chain-guard","https://github.com/xtremebeing/starlette-host-header-lab","https://github.com/Bhanunamikaze/BadHost-CVE-2026-48710-Exploit"],"nuclei":["CVE-2026-48710"],"checkedAt":"2026-10-27T19:01:40.316Z"},"aliases":["GHSA-86qp-5c8j-p5mr","PYSEC-2026-161","X41-2026-002"],"ecosystem":"pip","ingestedAt":"2026-06-29T14:29:18.103Z","slug":"CVE-2026-48710","body":"## Overview\n\nStarlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope[\"server\"]` for malformed values.\n\n## Affected\n\n- `starlette >= 0.8.3, < 1.0.1`\n- `ai_inference_server >= 3.3.0, <= 3.3.5`\n- `ansible_automation_platform = 2.6`\n- `ansible_automation_platform = 2.7`\n- `migration_toolkit_for_applications < 8.2.0`\n- `openshift_ai >= 3.3, < 3.3.5`\n- `openshift_ai >= 3.4, < 3.4.2`\n- `openshift_lightspeed`\n- `satellite = 6.17`\n- `satellite = 6.18`\n- `satellite = 6.19`\n- `enterprise_linux_ai = 3.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `starlette 1.0.1`\n- `migration_toolkit_for_applications 8.2.0`\n- `openshift_ai 3.4.2`\n\n## Package advisory (CVE-2026-48710)\n\nAffected packages:\n\n- `starlette < 1.0.1`\n\nPatched in:\n\n- `starlette 1.0.1`\n\nSource: https://osv.dev/vulnerability/GHSA-86qp-5c8j-p5mr\n\n## Vendor advisories\n\n- **RHSA-2026:30089** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-06-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:30089)\n- **RHSA-2026:30088** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-06-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:30088)\n- **RHSA-2026:69466** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69466)\n- **RHSA-2026:69467** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69467)\n- **RHSA-2026:69464** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69464)\n- **RHSA-2026:24866** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.6 · released 2026-06-09 · [advisory](https://access.redhat.com/errata/RHSA-2026:24866)\n- **RHSA-2026:23346** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.7 · released 2026-06-04 · [advisory](https://access.redhat.com/errata/RHSA-2026:23346)\n- **RHSA-2026:43038** · Red Hat · fixed in: Red Hat Migration Toolkit for Applications 8.2 · released 2026-07-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:43038)\n- **RHSA-2026:37275** · Red Hat · fixed in: Red Hat OpenShift AI 3.3 · released 2026-07-09 · [advisory](https://access.redhat.com/errata/RHSA-2026:37275)\n- **RHSA-2026:60520** · Red Hat · fixed in: Red Hat OpenShift AI 3.4 · released 2026-08-27 · [advisory](https://access.redhat.com/errata/RHSA-2026:60520)\n- **RHSA-2026:34456** · Red Hat · fixed in: Red Hat OpenShift AI 3.4 · released 2026-07-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:34456)\n- **Red Hat VEX** · Moderate · affected: OpenShift Lightspeed, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux AI (RHEL AI) 3, OpenShift Lightspeed, … · updated 2026-10-19 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48710.json)\n- **RHSA-2026:70965** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-23 · [advisory](https://access.redhat.com/errata/RHSA-2026:70965)\n- **RHSA-2026:70979** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-23 · [advisory](https://access.redhat.com/errata/RHSA-2026:70979)\n- **RHSA-2026:70969** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-23 · [advisory](https://access.redhat.com/errata/RHSA-2026:70969)\n- **RHSA-2026:76150** · Red Hat · fixed in: Red Hat Enterprise Linux AI 3.4 · released 2026-10-05 · [advisory](https://access.redhat.com/errata/RHSA-2026:76150)","depth":"midnight","depthScore":75,"depthScoreParts":{"impact":35.8,"likelihood":14.1,"exploitation":25,"ransomware":0},"changes":[{"seq":230199,"id":"CVE-2026-48710","ts":1793127702743,"field":"epss","old":"0.07056","new":"0.70288"},{"seq":210767,"id":"CVE-2026-48710","ts":1790325681356,"field":"epss","old":"0.36257","new":"0.07056"},{"seq":5272,"id":"CVE-2026-48710","ts":1788887259205,"field":"exploit_available","old":"false","new":"true"},{"seq":4155,"id":"CVE-2026-48710","ts":1788886375970,"field":"exploit_available","old":"true","new":"false"},{"seq":2923,"id":"CVE-2026-48710","ts":1788883041360,"field":"exploit_available","old":"false","new":"true"},{"seq":1952,"id":"CVE-2026-48710","ts":1788882444654,"field":"exploit_available","old":"true","new":"false"},{"seq":1040,"id":"CVE-2026-48710","ts":1788881879382,"field":"exploit_available","old":"false","new":"true"},{"seq":222,"id":"CVE-2026-48710","ts":1788556174733,"field":"epss","old":"0.11042","new":"0.36257"},{"seq":218,"id":"CVE-2026-48710","ts":1788469572455,"field":"epss","old":"0.02099","new":"0.11042"},{"seq":214,"id":"CVE-2026-48710","ts":1788382976793,"field":"exploited","old":"false","new":"true"},{"seq":213,"id":"CVE-2026-48710","ts":1788382976793,"field":"kev","old":"false","new":"true"}]}