CVE-2026-84381
Description
A flaw was found in httpcore2, a component used by HTTPX2. When a remote origin uses WebSocket Secure (wss) through a SOCKS5 proxy, httpcore2 fails to initiate Transport Layer Security (TLS) encryption because its upgrade condition only recognizes HTTPS. This vulnerability allows an attacker controlling or observing the proxy path to intercept and read sensitive WebSocket traffic, including authentication details and data frames, as it is transmitted in plaintext. The attacker could also modify the traffic or impersonate the WebSocket server, leading to information disclosure and potential compromise of communication integrity.
Statement
This vulnerability is rated as an Important severity because it completely compromises confidentiality and integrity over intended encrypted channels, permitting network-adjacent or man-in-the-middle attackers to capture authentication credentials and tamper with session data. In Red Hat environments, exposure is limited to specific deployments where client services are explicitly configured to route WebSocket Secure (wss://) connections through a SOCKS5 proxy. Direct secure WebSocket connections as well as standard HTTPS traffic traversing SOCKS5 proxies are unaffected, as they negotiate TLS handshakes as expected.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 8.1 | N/A | 8.1 |
| Attack Vector | Adjacent Network | N/A | Adjacent Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | None | N/A | None |
Vector
Red Hat: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
cve.org: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
