CVE-2026-73812
Description
A flaw was found in the inets httpd server, part of Erlang/OTP. The server incorrectly processes HTTP requests that contain both Transfer-Encoding: chunked and Content-Length headers, failing to reject them or close the connection as required by RFC 9112 §6.1. When inets is deployed behind a reverse proxy that prioritizes the Content-Length header, a remote attacker can exploit this discrepancy to smuggle malicious requests. This can lead to bypassing access controls, poisoning responses for other users, and circumventing authentication mechanisms enforced by the proxy.
Statement
This is an Important vulnerability in the inets httpd server, part of Erlang/OTP, that allows HTTP request smuggling. When inets is deployed behind a reverse proxy that prioritizes the Content-Length header, a remote attacker can bypass security controls, poison responses, and circumvent authentication. This is due to inets failing to properly handle requests with both Transfer-Encoding: chunked and Content-Length headers.
Mitigation
No mitigation is currently available for this vulnerability. Red Hat recommends applying the appropriate security update as soon as it becomes available.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 8.2 | N/A | N/A |
| Attack Vector | Network | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | None | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | Low | N/A | N/A |
| Integrity Impact | High | N/A | N/A |
| Availability Impact | None | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
