Critical "BadHost" vulnerability in Starlette framework puts millions of AI agents at risk
By
@rwpickard.bsky.social
Warm and crisp on the edges. A bagel with a bit of bite.
Summary
A critical vulnerability called "BadHost" has been discovered in Starlette, an open source ASGI framework with 325 million weekly downloads. The flaw can allow hackers to breach servers running AI agents and tools, potentially stealing sensitive data and credentials to third-party accounts. Thousands of other open source projects are also affected because they depend on Starlette to function.
Key quotes
· 3 pulledMillions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to breach the servers running them and make off with sensitive data and credentials to third-party accounts
The vulnerability is present in Starlette, an open source framework that its developer says receives 325 million downloads per week
Thousands of other open source projects are also vulnerable because they require Starlette to work
You might also wanna read
CVE-2026-48710 (BadHost): Critical Starlette Host-Header Auth Bypass Vulnerability Affects FastAPI and Python ASGI Applications
A critical security vulnerability (CVE-2026-48710, dubbed "BadHost") has been discovered in Starlette web framework versions prior to 1.0.1,
badhost.org·5d ago
OpenCode AI Coding Agent Hit with Critical Remote Code Execution Vulnerability
OpenCode, a popular open-source AI coding agent, was recently hit with a critical CVE (Common Vulnerabilities and Exposures) that allowed fo
johncodes.com·4mo ago
Critical RCE Vulnerability in OpenClaw AI Assistant (CVE-2026-25253) Allows Data and Key Theft
A technical security analysis reveals a critical remote code execution (RCE) vulnerability (CVE-2026-25253) in OpenClaw, a popular open-sour
depthfirst.com·3mo ago
Security Analysis: AI Agent Frameworks' Code Execution Vulnerabilities and WASM Sandbox Solution
The article discusses security vulnerabilities in popular AI agent frameworks like LangChain, AutoGen, and SWE-Agent that execute LLM-genera
github.com·4mo ago
Anthropic's Claude Opus 4.6 AI Model Discovers 500+ High-Severity Security Flaws in Open-Source Libraries
Anthropic's latest AI model, Claude Opus 4.6, has discovered over 500 previously unknown high-severity security vulnerabilities in open-sour
axios.com·3mo ago
GitHub Issue Prompt Injection Leads to 4,000 Developer Machines Compromised via Malicious npm Package
A sophisticated supply chain attack compromised approximately 4,000 developer machines through a GitHub issue title prompt injection. The at
grith.ai·2mo ago