CyberSecBulletin

Headroomlabs-ai vulnerabilities

We track 1 vulnerability in Headroomlabs-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Headroomlabs-ai vulnerabilities

  • 8.8 High severity

    headroom: Improper Authentication

    CVE-2026-71416Headroomlabs-ai

    Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the `Origin` header of incoming client WebSocket requests before forwarding the request to the upstream server, al