Starlette — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• Critical BadHost Vulnerability Exposes AI Applications to Authentication Bypass

  A severe vulnerability known as BadHost (CVE-2026-48710) has been identified in the Starlette framework, affecting millions of AI applications, including those built on FastAPI. This flaw allows unauthenticated…

  16 articles · Updated May 26, 2026
• Starlette Vulnerability Allows Path Injection via Host Header

  A vulnerability in Starlette, a Python ASGI framework, allows attackers to manipulate the Host header, leading to potential authentication bypass and other security issues. The flaw arises from Starlette's failure to…

  3 articles · Updated May 27, 2026

Recent Intelligence Reports

• CVE-2026-42271 Chained with CVE-2026-48710 — horizon3.ai · June 9, 2026
• LiteLLM Flaw Chains to CVSS 10 Unauthenticated RCE — Aiweekly.Co · June 9, 2026
• Active Exploitation Alert: CVE-2026-42271 and CVE-2026-48710 — Rescana · June 9, 2026
• LiteLLM Vulnerability Enables Unauthenticated Remote Code Execution — Letsdatascience · June 9, 2026
• Attackers Can Exploit BadHost to Access Sensitive AI Agent Server Endpoints — Cybersecuritynews · May 27, 2026
• FastAPI — Csoonline · May 27, 2026
• PYSEC-2026-161 — osv.dev · May 27, 2026
• X41 2026 002 Starlette — x41-dsec.de · May 27, 2026

Related Entities