CVE-2026-48710 - Vulnerability Details

Related Threat Clusters

• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• Critical BadHost Vulnerability Exposes AI Applications to Authentication Bypass

  A severe vulnerability known as BadHost (CVE-2026-48710) has been identified in the Starlette framework, affecting millions of AI applications, including those built on FastAPI. This flaw allows unauthenticated…

  16 articles · Updated May 26, 2026
• Critical Security Bypass in Python-Starlette Affects Fedora 43 and 44

  A critical security vulnerability, CVE-2026-48710, has been identified in Python-Starlette, affecting Fedora 43 and 44. The flaw allows a security restriction bypass via a malformed HTTP Host header. Systems running…

  2 articles · Updated June 5, 2026

Recent Intelligence Reports

• CVE-2026-42271 Chained with CVE-2026-48710 — horizon3.ai · June 9, 2026
• Active Exploitation Alert: CVE-2026-42271 and CVE-2026-48710 — Rescana · June 9, 2026
• LiteLLM Vulnerability Enables Unauthenticated Remote Code Execution — Letsdatascience · June 9, 2026
• LiteLLM Vulnerability Allows Attackers to Execute Arbitrary Commands on Servers — Gbhackers · June 9, 2026
• Fedora 44 python-starlette Security Fix for CVE-2026 — Linuxsecurity · June 5, 2026
• Fedora 43 Python-Starlette Critical Security Bypass CVE-2026 — Linuxsecurity · June 5, 2026
• Starlette Vulnerability Exposes AI Agent Endpoints | Let's Data Science — Letsdatascience · May 27, 2026
• Attackers Can Exploit BadHost to Access Sensitive AI Agent Server Endpoints — Cybersecuritynews · May 27, 2026

Related Entities