Vulnerability Description
Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters (0x0A) into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers can craft a header value containing a complete additional HTTP request that is interpreted as a separate request by backends such as Go net/http and Python http.server, causing the backend to process a smuggled request with attacker-chosen method, path, and headers that bypasses the rouille handler's access control logic.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/theopaid/HTTP-Request-Smuggling-Enables-Front-End-Access-Cont
- https://www.vulncheck.com/advisories/rouille-http-request-smuggling-via-proxy-he
FAQ
What is CVE-2026-67182?
CVE-2026-67182 is a vulnerability with a CVSS score of 7.5 (HIGH). Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters (0x0A) into client-supplied r...
How severe is CVE-2026-67182?
CVE-2026-67182 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-67182?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.