tag
Host-Header
Critical
MCPJam Inspector / Arcane MCP Connect Command Injection RCE via Host-Header Vhost Routing (CVE-2026-23520)
CVE-2026-23520·
Arcane v1.13.0 (MCPJam Inspector component)
unpatched
Critical
LiteLLM Proxy Unauthenticated Auth Bypass via Host-Header Route Confusion (CVE-2026-49468)
CVE-2026-49468·
LiteLLM (BerriAI) proxy
patched