CVE-2026-1467: Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured
A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injection, occurs when an HTTP proxy is configured and the library improperly handles URL-decoded input used to create the Host header. A remote attacker can exploit this by providing a specially crafted URL containing CRLF sequences, allowing them to inject additional HTTP headers or complete HTTP request bodies. This can lead to unintended or unauthorized HTTP requests being forwarded by the proxy, potentially impacting downstream services.
Other sources
CRLF Injection vulnerability in the libsoup HTTP client library when an HTTP proxy is configured. The issue is caused by improper sanitization of URL-decoded input used to populate the Host header during request creation in the SoupSession workflow. By supplying a specially crafted URL containing CRLF sequences, an attacker can inject additional HTTP headers or complete HTTP request bodies. Exploitation requires a victim application to process an attacker-controlled URL while using an HTTP proxy. Successful exploitation may allow unintended or unauthorized HTTP requests to be forwarded by the proxy, potentially impacting downstream services, but does not directly compromise the client system.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1467?
CVE-2026-1467 has been rated with a high severity due to its potential for HTTP header injection vulnerabilities.
How do I fix CVE-2026-1467?
To fix CVE-2026-1467, update the libsoup library to the latest version that includes the security patch.
What software is affected by CVE-2026-1467?
CVE-2026-1467 affects the libsoup HTTP client library when used with an HTTP proxy configured.
What types of attacks can CVE-2026-1467 enable?
CVE-2026-1467 can enable HTTP header injection attacks, potentially compromising sensitive data.
Is CVE-2026-1467 relevant for all users of libsoup?
CVE-2026-1467 is particularly relevant for users of libsoup who are running it with an HTTP proxy configuration.