CVE-2026-67435

Awaiting Analysis Awaiting Analysis - Queue

Remote Code Execution in linuxfabrik-lib

Publication date: 2026-07-29

Last updated on: 2026-07-29

Assigner: GitHub, Inc.

Description

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch() followed cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, allowing a malicious redirect-capable server to receive headers such as X-Auth-Token from authenticated monitoring requests. This issue is fixed in version 6.0.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-29

Last Modified

2026-07-29

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-67435

Affected Vendors & Products

Vendor	Product	Version / Range
linuxfabrik	lib	to 6.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

The vulnerability is in the linuxfabrik-lib Python module before version 6.0.0. The lib.url.fetch() function incorrectly follows cross-origin redirects while forwarding certain credential headers like X-Auth-Token. This allows a malicious server to receive sensitive headers from authenticated monitoring requests.

Detection Guidance

This vulnerability involves the lib.url.fetch() function in linuxfabrik-lib versions prior to 6.0.0 following cross-origin redirects while forwarding certain credential headers. Detection requires checking if your system uses affected versions of linuxfabrik-lib and inspecting network traffic for suspicious redirects during authenticated requests.

Impact Analysis

An attacker could exploit this to steal sensitive authentication tokens or headers from your monitoring requests. This could lead to unauthorized access to systems or data if those tokens are used elsewhere. The impact depends on what headers are forwarded and how they are used.

Compliance Impact

This vulnerability could lead to unauthorized data access or exposure, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Organizations using affected versions may face compliance violations if sensitive data is compromised.

Mitigation Strategies

Immediately upgrade linuxfabrik-lib to version 6.0.0 or later to address the vulnerability. Review any scripts or applications using lib.url.fetch() to ensure they handle redirects securely and do not expose sensitive headers.

Hi! I’m here to help you understand CVE-2026-67435. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70