AIKIDO-2026-10923

TL;DR

Affected versions are vulnerable to improper Host header validation when reconstructing request.url. A crafted Host header containing path or query delimiters can cause request.url.path to differ from the actual requested path, potentially allowing attackers to bypass path-based security checks or authorization middleware.