---
id: CVE-2026-48818
title: >-
  starlette: Starlette: SSRF and NTLM credential theft via UNC paths in
  StaticFiles on Windows (CVE-2026-48818)
summary: >-
  A flaw was found in Starlette, a lightweight ASGI framework. On Windows
  systems, the StaticFiles component is vulnerable to Server-Side Request
  Forgery (SSRF). A remote attacker can exploit this by providing a specially
  crafted Universal N…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: vendor
cwe: CWE-918
vendor: Red Hat
product: Red Hat AI Inference Server 3.3
affected:
  - ai_inference_server 3.3
patched:
  - ai_inference_server 3.3
published: '2026-06-17'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:03:35+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-48818'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2490020'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-48818'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-48818'
  - url: >-
      https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5
  - url: 'https://github.com/Kludex/starlette/pull/3287'
  - url: 'https://github.com/Kludex/starlette/releases/tag/1.1.0'
  - url: >-
      https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r
  - url: 'https://access.redhat.com/errata/RHSA-2026:30089'
  - url: 'https://access.redhat.com/errata/RHSA-2026:30088'
  - url: 'https://access.redhat.com/errata/RHSA-2026:30087'
  - url: 'https://github.com/Kludex/starlette'
  - url: 'https://github.com/advisories/GHSA-wqp7-x3pw-xc5r'
tags:
  - csaf
  - vex
  - red-hat
  - osv
  - pip
  - ghsa
epss: 0.00368
epssPercentile: 0.30485
aliases:
  - GHSA-wqp7-x3pw-xc5r
  - PYSEC-2026-2281
ecosystem: pip
ingestedAt: '2026-07-07T15:41:58.661Z'
---

## Overview

A flaw was found in Starlette, a lightweight ASGI framework. On Windows systems, the StaticFiles component is vulnerable to Server-Side Request Forgery (SSRF). A remote attacker can exploit this by providing a specially crafted Universal Naming Convention (UNC) path, which causes the system to initiate an outbound Server Message Block (SMB) connection. This action can expose the service account's NTLMv2 credentials, potentially leading to information disclosure or further attacks.

## Vendor advisories

- **RHSA-2026:30089** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-06-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:30089)
- **RHSA-2026:30088** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-06-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:30088)
- **RHSA-2026:30087** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-06-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:30087)

**starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows** — rated Important by Red Hat. Released 2026-06-17, updated 2026-10-15.

Fixed:

- Red Hat AI Inference Server 3.3

Not affected:

- Exploit Intelligence
- Migration Toolkit for Applications 8
- OpenShift Lightspeed
- Red Hat AI Inference Server
- Red Hat Ansible Automation Platform 2
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat Hardened Images
- Red Hat OpenShift AI (RHOAI)
- Red Hat Satellite 6

## Remediation

For more information visit https://access.redhat.com/errata/RHSA-2026:30089 https://access.redhat.com/errata/RHSA-2026:30089
For more information visit https://access.redhat.com/errata/RHSA-2026:30088 https://access.redhat.com/errata/RHSA-2026:30088
For more information visit https://access.redhat.com/errata/RHSA-2026:30087 https://access.redhat.com/errata/RHSA-2026:30087

Workarounds / mitigations:

- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

## Package advisory (CVE-2026-48818)

Affected packages:

- `starlette < 1.1.0`

Patched in:

- `starlette 1.1.0`

Source: https://osv.dev/vulnerability/GHSA-wqp7-x3pw-xc5r