Vulnerability  ·  2026-06-20

Starlette BadHost Host-Header Authentication Bypass — Affects vLLM and FastAPI-Based AI Tools

VulnerabilityHigh impactGlobalCVE-2026-48710
Starlette's host validation was bypassable via crafted Host headers. The auth layer derives the effective route from request.url.path (reconstructed from the Host header), but FastAPI dispatches based on a different evaluation. This mismatch allows attackers to reach routes that should be protected, particularly when chained with CVE-2026-42271.
This affects millions of AI agents and LLM inference endpoints. Bypassing auth on model servers or AI gateways grants attackers direct access to model APIs, inference hardware, and credential storage. It enables model poisoning, prompt injection at scale, and supply-chain style attacks on AI deployments.
An attacker crafts an HTTP Host header that causes the auth layer to evaluate a different route than the one FastAPI actually dispatches. This allows bypassing authentication checks and reaching protected management endpoints on AI gateways and model servers.
Starlette 0.8.3 through 1.0.0; FastAPI applications using default auth; vLLM proxy instances; all ASGI-based AI frameworks
Upgrade Starlette to 1.0.1 or later. Audit Host header parsing and restrict allowed hosts in FastAPI/Starlette configuration.
Sources
Avinash Sangle: LiteLLM CVE-2026-42271 Response GuideThe Hacker News: Wildcard CORS/BadHost Coverage
See this in the live feed Explore related AI security and governance findings — updated every morning.
Open the feed →