{"id":"CVE-2026-57209","kind":"vulnerability","aliases":["CVE-2026-57209"],"related":[],"title":"Heimdall: Host header injection lets attackers spoof Forwarded header in proxy mode","description":"Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when Heimdall operates in proxy mode, it constructs the Forwarded HTTP header after executing the matched rule pipeline by inserting the incoming request's Host header value directly into the header string without sanitizing commas or semicolons. This allows an attacker to inject additional parameters into the Forwarded header, potentially spoofing IP addresses for upstream services. This issue has been patched in version 0.17.17.","summary":"In Heimdall's proxy mode, the Host header value is copied into the Forwarded header without removing commas or semicolons. An attacker can add extra parameters to that header and spoof client IP addresses seen by upstream services.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["heimdall","kubernetes","other","self-hosted"],"not_affected_if":["no-proxy-mode","version-0.17.17-or-later"],"how_to_check":"- Run `heimdall version` or check the deployed image tag to see whether the version is below `0.17.17`\n- Check whether Heimdall runs in proxy mode and whether upstream services trust the Forwarded header for IP addresses or access decisions","fix":"- Upgrade Heimdall to `0.17.17` or later\n- Until upgraded, do not rely on the Forwarded header from upstream services for IP-based access decisions","status":"open","published_at":"2026-10-23T13:17:11+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T03:36:57+00:00","updated_at":"2026-10-25T03:36:57+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-25T03:36:57Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Heimdall to `0.17.17` or later\n- Until upgraded, do not rely on the Forwarded header from upstream services for IP-based access decisions","reach":"internet","title":"Heimdall: Host header injection lets attackers spoof Forwarded header in proxy mode","impact":"low","summary":"In Heimdall's proxy mode, the Host header value is copied into the Forwarded header without removing commas or semicolons. An attacker can add extra parameters to that header and spoof client IP addresses seen by upstream services.","category":"other","nicknames":[],"who_cares":["heimdall","self-hosted","kubernetes"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker spoofs client IP addresses seen by upstream services","analyst_note":"","how_to_check":"- Run `heimdall version` or check the deployed image tag to see whether the version is below `0.17.17`\n- Check whether Heimdall runs in proxy mode and whether upstream services trust the Forwarded header for IP addresses or access decisions","needs_analyst":false,"not_affected_if":["version-0.17.17-or-later","no-proxy-mode"],"who_is_affected":"Teams running Heimdall as an identity-aware proxy in proxy mode before version 0.17.17, where upstream services use the Forwarded header for client IP or access decisions. Deployments that do not use proxy mode, or whose upstreams ignore Forwarded, are less exposed. The sources do not say how the attacker sends the request.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000622,"input_tokens":3386,"output_tokens":566,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-57209':15A,18A '0.17.17':79C,143C 'access':72C 'add':48B 'addit':123C 'address':58B,132C 'allow':118C 'attack':6A,46B,120C 'awar':69C 'client':56B 'cloud':66C 'comma':42B,114C 'construct':87C 'control':73C 'copi':35B 'cve':13A,16A 'decis':74C 'direct':107C 'execut':93C 'extra':49B 'forward':8A,38B,89C,127C 'header':3A,9A,32B,39B,53B,91C,105C,110C,128C 'heimdal':1A,19B,26B,63C,81C 'host':2A,24B,31B,104C 'http':90C 'ident':68C 'incom':101C 'inject':4A,122C 'insert':99C 'ip':57B,131C 'issu':137C 'kubernet':20B 'let':5A 'match':95C 'mode':12A,29B,85C 'nativ':67C 'oper':82C 'paramet':50B,124C 'patch':140C 'pipelin':97C 'potenti':129C 'prior':76C 'proxi':11A,28B,70C,84C 'remov':41B 'request':102C 'rule':96C 'sanit':113C 'seen':59B 'self':23B 'self-host':22B 'semicolon':44B,116C 'servic':62B,75C,135C 'spoof':7A,55B,130C 'string':111C 'upstream':61B,134C 'valu':33B,106C 'version':78C,142C 'without':40B,112C","nicknames":[],"mitigations":[],"who_affected":"Teams running Heimdall as an identity-aware proxy in proxy mode before version 0.17.17, where upstream services use the Forwarded header for client IP or access decisions. Deployments that do not use proxy mode, or whose upstreams ignore Forwarded, are less exposed. The sources do not say how the attacker sends the request.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T13:17:11+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-57209","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57209","severity":null,"published_at":"2026-10-23T13:17:11+00:00","modified_at":"2026-10-23T19:57:42+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}