CVE-2026-71416

    Dashboard / Vulnerabilities / CVE-2026-71416

    CVE-2026-71416

    Published: 11 Sept 2026Last Modified: 12 Sept 2026

    Summary: Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

    Details: Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the `Origin` header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to perform arbitrary LLM requests without authentication. This can be exploited by a malicious WebSocket client executed in a traditional or headless browser such as lightpanda, if the browser has access to the Headroom proxy and the OpenAI API key is stored in the `OPENAI_API_KEY` environment variable. Version 0.35.0 fixes the issue.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71416.json, https://github.com/headroomlabs-ai/headroom/releases/tag/v0.35.0, https://github.com/headroomlabs-ai/headroom/security/advisories/GHSA-h46j-26q3-rggf, https://nvd.nist.gov/vuln/detail/CVE-2026-71416

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -93f2d7a2da4d3b6c88f31bad164ae299cf042104

    Affected versions

    v0.34.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-71416 | CVE-DB