CVE-2026-71416
highHeadroom compresses data before the data reaches a large language model.
Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the `Origin` header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to perform arbitrary LLM requests without authentication. This can be exploited by a malicious WebSocket client executed in a traditional or headless browser such as lightpanda, if the browser has access to the Headroom proxy and the OpenAI API key is stored in the `OPENAI_API_KEY` environment variable. Version 0.35.0 fixes the issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/headroomlabs-ai/headroom/releases/tag/v0.35.0 security-advisories@github.com
- https://github.com/headroomlabs-ai/headroom/security/advisories/GHSA-h46j-26q3-rggf security-advisories@github.com
- https://github.com/headroomlabs-ai/headroom/security/advisories/GHSA-h46j-26q3-rggf 134c704f-9b21-4f2e-91b3-4a467353bcc0