Headroom Labs vulnerabilities
We track 2 vulnerabilities in Headroom Labs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest Headroom Labs vulnerabilities
- 9.1 Critical severity
Headroom: Authorization Bypass Through User-Controlled Key
Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the value to the
- 8.6 High severity
Headroom: Server-Side Request Forgery
Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve_openai_upstream_base in headroom/proxy/handlers/openai.py accepts the header value, requires only that it parse with an http or https schem