CVE-2026-67182 — Rouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Header Injection
Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters (0x0A)…
Published: 2026-07-28 · CVSS: 6.9 · CVSS 4.0
Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters (0x0A) into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers can craft a header value containing a complete additional HTTP request that is interpreted as a separate request by backends such as Go net/http and Python http.server, causing the backend to process a smuggled request with attacker-chosen method, path, and headers that bypasses the rouille handler's access control logic.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7