CVE-2026-48818

Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Windows is vulnerable to SSRF. An UNC path such as \\attacker.com\share can cause os.path.realpath to initiate an outbound SMB connection before the path is rejected, exposing the service account’s NTLMv2 credentials for offline cracking or relay even though the HTTP response is only a 404. The issue affects default follow_symlink=False deployments, including frameworks built on Starlette such as FastAPI; POSIX systems and follow_symlink=True are unaffected. The issue is fixed in 1.1.0.

• CWE-918
• CWE-918

• https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5Patch
• https://github.com/Kludex/starlette/pull/3287Patch
• https://github.com/Kludex/starlette/releases/tag/1.1.0Release Notes
• https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5rMitigation, Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-2281.yaml
• https://access.redhat.com/errata/RHSA-2026:30087
• https://access.redhat.com/errata/RHSA-2026:30088
• https://access.redhat.com/errata/RHSA-2026:30089
• https://access.redhat.com/security/cve/CVE-2026-48818
• https://bugzilla.redhat.com/show_bug.cgi?id=2490020
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json

Published

Jun 17, 2026

Last Modified

Aug 4, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48812FreeScout is a free help desk and shared inbox built with PH…7.5
• CVE-2026-48813Flawfinder is a a static analysis tool for finding vulnerabi…8.7
• CVE-2026-48814Network-AI is a TypeScript/Node.js multi-agent orchestrator.…9.1
• CVE-2026-48815sigstore-js provides JavaScript libraries for interacting wi…7.5
• CVE-2026-48816sigstore-js provides JavaScript libraries for interacting wi…6.5
• CVE-2026-48817Starlette is a lightweight ASGI framework/toolkit. In versio…5.3
• CVE-2026-48819Hey API is an ecosystem for turning API specifications into …4.8
• CVE-2026-4882The User Registration Advanced Fields plugin for WordPress i…9.8
• CVE-2026-48820CakePHP is a rapid development framework for PHP. In version…6.3
• CVE-2026-48821Shaarli is a personal bookmarking service. Versions 0.16.1 a…5.8
• CVE-2026-48822Shaarli is a personal bookmarking service. Versions 0.16.1 a…5.8
• CVE-2026-48823Shaarli is a personal bookmarking service. Versions 0.16.1 a…4.8