CVE-2026-116127
Description
A flaw was found in Starlet. The server improperly includes a message body when answering certain Hypertext Transfer Protocol (HTTP) requests, such as HEAD requests or responses that should have no body. A remote attacker could exploit this issue by sending pipelined requests over persistent connections, causing leftover response data to bleed into subsequent responses. This behavior can desynchronize downstream proxy servers, potentially leading to response corruption or serving mismatched data across different clients.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Understanding the Weakness (CWE)
Integrity,Non-Repudiation,Access Control
Technical Impact: Unexpected State; Hide Activities; Bypass Protection Mechanism
An attacker could create HTTP messages to exploit a number of weaknesses including 1) the message can trick the web server to associate a URL with another URL's webpage and caching the contents of the webpage (web cache poisoning attack), 2) the message can be structured to bypass the firewall protection mechanisms and gain unauthorized access to a web application, and 3) the message can invoke a script or a page that returns client credentials (similar to a Cross Site Scripting attack).
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
