Millions of servers running artificial intelligence systems worldwide are now at risk. A critical vulnerability named BadHost has been discovered in the popular Starlette framework, allowing attackers to bypass security systems and steal sensitive user data.
Scale of the Problem
Starlette is a free tool for Python developers that helps handle thousands of requests simultaneously. It serves as the foundation for FastAPI and other popular solutions. The framework is downloaded more than 325 million times per week, making its vulnerability a global issue.
How the Attack Works
The CVE-2026-48710 vulnerability allows hackers to manipulate HTTP Host headers. Adding just one extra character can cause the system to bypass password checks, granting access to MCP (Model Context Protocol) servers through which AI interacts with external resources.
What Has Already Been Stolen
Researchers from X41 D-Sec and Secwest have found that the following data has been exposed through this breach:
- Medical databases and patient records
- Financial reports and clinical trial data
- Scanned documents and job candidate databases
- Full access to others' email accounts
- Control over industrial IoT devices
What to Do
Developers have already released a fix in Starlette version 1.0.1. Users of FastAPI, vLLM, and LiteLLM are strongly advised to update their codebase. A free scanner from X41 D-Sec and Nemesis is available for security checks.
