TLDR Tech / InfoSec
Millions of AI Agents Imperiled by Critical Vulnerability in Open Source Package
A critical vulnerability was discovered in the Startlette ASGI implementation that underpins FastAPI and other widely used frameworks for building Python services. The vulnerability can be trivially exploited to bypass path-based authorization by adding a single character to the HTTP host header. Developers relying on projects that use Startlette, such as FastLLM, vLLM, or LiteLLM, should make sure to update.
Read the full story