{"data":{"id":"086bd536-e2a6-4837-9ade-1e3dd4c46b14","title":"CVE-2026-71416: Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom…","summary":"Headroom, a tool that compresses data before it reaches a large language model, fails to validate the `Origin` header on incoming WebSocket requests before the Headroom WebSocket server forwards them upstream. A malicious WebSocket client running in a browser that can reach the Headroom proxy can make arbitrary LLM requests without authentication, which exposes the OpenAI API key stored in the `OPENAI_API_KEY` environment variable. The flaw affects versions prior to 0.35.0.","solution":"Fixed in 0.35.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-71416","publishedAt":"2026-09-11T14:17:32.390Z","cveId":"CVE-2026-71416","cweIds":["CWE-287","CWE-1385"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["headroom-ai@< 0.35.0 (fixed: 0.35.0)"],"affectedPackageNames":["headroom-ai"],"affectedPackageRefs":["pypi:headroom-ai"],"affectedVendors":["OpenAI"],"affectedVendorsRaw":["Headroom","OpenAI API"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Headroom WebSocket origin validation flaw enables unauthenticated LLM requests","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00174,"epssCheckedAt":"2026-11-05T18:10:04.161Z","kevDateAdded":null,"advisoryAliases":["GHSA-h46j-26q3-rggf"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:43:58.021Z","patchAvailable":true,"disclosureDate":"2026-09-11T14:17:32.390Z","fixReleasedAt":"2026-08-13T04:05:19.244Z","daysToFix":-29,"fixCheckedAt":"2026-10-29T21:30:41.601Z","capecIds":["CAPEC-114"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"headroom-ai","fixedVersion":"0.35.0","matchedVersion":"0.35.0","fixReleasedAt":"2026-08-13T04:05:19.244Z","daysToFix":-29,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:41.456Z"}]}}