HighVulnerabilityLLM-specific
CVE-2026-71416: Headroom WebSocket origin validation flaw enables unauthenticated LLM requests
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-71416
- Published
- Record updated
- Affected
- headroom-ai < 0.35.0
- Fixed in
- 0.35.0
- released August 13, 2026, 29 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
Headroom, a tool that compresses data before it reaches a large language model, fails to validate the `Origin` header on incoming WebSocket requests before the Headroom WebSocket server forwards them upstream. A malicious WebSocket client running in a browser that can reach the Headroom proxy can make arbitrary LLM requests without authentication, which exposes the OpenAI API key stored in the `OPENAI_API_KEY` environment variable. The flaw affects versions prior to 0.35.0.
Mitigation
Fixed in 0.35.0.
Related items
- MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
- HighCVE-2026-107685: req_llm WebSocket streaming client accepts untrusted TLS certificatesSame vendor · NVD/CVE Database
- MediumCVE-2026-113459: TYPO3 OpenAI API key exposed to backend users in page sourceSame vendor · NVD/CVE Database
- MediumCVE-2026-109296: Open WebUI missing authorization lets users reach disabled model backendsSame vendor · NVD/CVE Database
- MediumCVE-2026-107430: VideoWhisper Site Manager for ChatGPT, Claude, Codex missing authorization checkSame vendor · NVD/CVE Database