CVE-2026-34441

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.40.0, cpp-httplib is vulnerable to HTTP Request Smuggling. The server's static file handler serves GET responses without consuming the request body. On HTTP/1.1 keep-alive connections, the unread body bytes remain on the TCP stream and are interpreted as the start of a new HTTP request. An attacker can embed an arbitrary HTTP request inside the body of a GET request, which the server processes as a separate request. This issue has been patched in version 0.40.0.

• CWE-444

• https://github.com/yhirose/cpp-httplib/releases/tag/v0.40.0Product, Release Notes
• https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-jv63-rm9j-6jwcExploit, Mitigation, Vendor Advisory

Published

Mar 31, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34425OpenClaw versions prior to commit 8aceaf5 contain a prefligh…4.3
• CVE-2026-34426OpenClaw versions prior to commit b57b680 contain an approva…7.3
• CVE-2026-34427Vvveb prior to 1.0.8.1 contains a privilege escalation vulne…8.8
• CVE-2026-34428Vvveb prior to 1.0.8.1 contains a server-side request forger…8.3
• CVE-2026-34429Vvveb prior to 1.0.8.1 contains a stored cross-site scriptin…5.4
• CVE-2026-34430ByteDance DeerFlow versions prior to commit 92c7a20 contain …9.6
• CVE-2026-34442FreeScout is a free help desk and shared inbox built with PH…6.1
• CVE-2026-34443FreeScout is a free help desk and shared inbox built with PH…5.3
• CVE-2026-34444Lupa integrates the runtimes of Lua or LuaJIT2 into CPython.…10
• CVE-2026-34445Open Neural Network Exchange (ONNX) is an open standard for …8.6
• CVE-2026-34446Open Neural Network Exchange (ONNX) is an open standard for …5.5
• CVE-2026-34447Open Neural Network Exchange (ONNX) is an open standard for …5.5