CVE-2026-71416

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the `Origin` header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to perform arbitrary LLM requests without authentication. This can be exploited by a malicious WebSocket client executed in a traditional or headless browser such as lightpanda, if the browser has access to the Headroom proxy and the OpenAI API key is stored in the `OPENAI_API_KEY` environment variable. Version 0.35.0 fixes the issue.

• CWE-287
• CWE-1385

• https://github.com/headroomlabs-ai/headroom/releases/tag/v0.35.0
• https://github.com/headroomlabs-ai/headroom/security/advisories/GHSA-h46j-26q3-rggf
• https://github.com/headroomlabs-ai/headroom/security/advisories/GHSA-h46j-26q3-rggf

Published

Sep 11, 2026

Last Modified

Sep 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71403A flaw was found in Rancher Manager. The /v3/users update pa…6.1
• CVE-2026-71404A flaw was found in Rancher Manager. The GlobalRole controll…8.7
• CVE-2026-71407A Stack-based Buffer Overflow vulnerability [CWE-121] vulner…8.1
• CVE-2026-71408A allocation of resources without limits or throttling vulne…5.3
• CVE-2026-7141A vulnerability was found in vLLM up to 0.19.0. The affected…5.6
• CVE-2026-71415Kirby is an open-source content management system. From 5.0.…7.1
• CVE-2026-71417Lemur manages TLS certificate creation. Prior to 1.9.3, POST…7.3
• CVE-2026-71418Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-7142A vulnerability was determined in Wooey up to 0.13.2. The im…6.3
• CVE-2026-71424Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14,…9.6
• CVE-2026-71428The unstructured library provides open-source components for…9.3
• CVE-2026-71429stream-json is a micro-library of stream components for proc…6.2