Skip to content
Critical BadHost Vulnerability Exposes AI Applications to Authentication Bypass

Critical BadHost Vulnerability Exposes AI Applications to Authentication Bypass

First seen 26 May 2026, 22:09 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 27, 2026 at 21:41 UTC
  • •BadHost vulnerability (CVE-2026-48710) allows unauthenticated access to sensitive AI endpoints.
  • •The flaw affects all Starlette versions prior to 1.0.1, impacting millions of applications.
  • •Patches are available, but many systems remain vulnerable due to slow update processes.

A severe vulnerability known as BadHost (CVE-2026-48710) has been identified in the Starlette framework, affecting millions of AI applications, including those built on FastAPI. This flaw allows unauthenticated attackers to bypass authentication controls by manipulating HTTP Host headers, potentially exposing sensitive endpoints and data. Discovered by X41 D-Sec, the vulnerability impacts all versions of Starlette prior to 1.0.1, which is widely used in AI-driven tools and services. The framework sees approximately 325 million downloads weekly, amplifying the risk across numerous projects. Patches have been released, but many applications remain unpatched, increasing the likelihood of exploitation. Tools for scanning affected systems are available at badhost.org. The security community is urging immediate action to mitigate risks associated with this vulnerability.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 136d ago How this analysis works

Timeline

2024-10-15
CVE-2024-47874 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-10-28
CVE-2025-62727 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-16
CVE-2026-5426 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-26
CVE-2026-48710 published
The BadHost vulnerability was disclosed, allowing attackers to bypass authentication in Starlette.
Csoonline
2026-05-26
First public PoC for BadHost
Public proof of concept for the BadHost vulnerability was released, demonstrating exploitation methods.
Cryptobriefing
2026-05-27
Patches released for Starlette
Starlette maintainers released patches addressing the BadHost vulnerability, urging users to update.
Risky Business

More articles in this cluster (16)

Following this threat?

Track CVE-2024-47874 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3