https://vulnerability.circl.lu/sightings/feed 2026-08-23T18:03:08.454533+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7c1783a8-5f20-4b69-a7d9-6baeb6a6f8b7/export 2026-08-23T18:03:08.470922+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7c1783a8-5f20-4b69-a7d9-6baeb6a6f8b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77776", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtno4xh7n42f", "content": "CVE-2026-77776\nHeadroom\u2019s language\u2011model gateway decides whose stored data to use based on a request header called x-headroom-user-id. Because the gateway does not verify that the caller actually owns that ID, anyone can send\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:40:06.382825Z"} 2026-08-22T06:40:06.382825+00:00 https://vulnerability.circl.lu/sighting/1413b4a3-cb03-4315-b506-afa9708904eb/export 2026-08-23T18:03:08.473751+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1413b4a3-cb03-4315-b506-afa9708904eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77776", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmnpvkdmn2b", "content": "CVE-2026-77776 - headroom\nThe Headroom service that sits in front of AI models accepts a custom header called x-headroom-user-id and trusts it to decide whose data to access. Because the service does\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#headroom #headroomlabs #CVE #infosec", "creation_timestamp": "2026-08-21T21:00:05.936503Z"} 2026-08-21T21:00:05.936503+00:00 https://vulnerability.circl.lu/sighting/c80f74ea-30bf-4dcd-a84a-f39fc1d42fef/export 2026-08-23T18:03:08.473853+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c80f74ea-30bf-4dcd-a84a-f39fc1d42fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77776", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117134102243290210", "content": "CVE-2026-77776 - Critical IDOR in Headroom LLM proxy. Spoof x-headroom-user-id to read/write other users' memory. CVSS 9.1. No patch yet - restrict access now. #CVE #Headroom #infosec\nhttps://www.valtersit.com/cve/CVE-2026-77776/", "creation_timestamp": "2026-08-21T15:02:47.962479Z"} 2026-08-21T15:02:47.962479+00:00 https://vulnerability.circl.lu/sighting/615d61f8-89c0-42a4-84bc-07f4868e240b/export 2026-08-23T18:03:08.473921+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "615d61f8-89c0-42a4-84bc-07f4868e240b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77776", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtlzqphljc2o", "content": "CVE-2026-77776 - Critical IDOR in Headroom LLM proxy. Spoof x-headroom-user-id to read/write other users' memory. CVSS 9.1. No patch yet - restrict access now. #CVE #Headroom #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-77776/", "creation_timestamp": "2026-08-21T15:02:38.049906Z"} 2026-08-21T15:02:38.049906+00:00 https://vulnerability.circl.lu/sighting/26ba430b-0cbb-4246-ad3d-d859f81e2450/export 2026-08-23T18:03:08.473986+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "26ba430b-0cbb-4246-ad3d-d859f81e2450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77776", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtlwnnj7k224", "content": "\ud83d\udea8 CVE-2026-77776 \u2014 CVSS 9.3 CRITICAL\n\nHeadroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is rea...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77776\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T14:07:14.177544Z"} 2026-08-21T14:07:14.177544+00:00 https://vulnerability.circl.lu/sighting/40a8d901-23e5-44c6-a7bc-8add6b6b3fb7/export 2026-08-23T18:03:08.474048+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "40a8d901-23e5-44c6-a7bc-8add6b6b3fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77776", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtlwccp76p27", "content": "\ud83d\udd34 CVE-2026-77776 - Critical (9.1)\n\nHeadroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The hea...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77776/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T14:00:54.644374Z"} 2026-08-21T14:00:54.644374+00:00 https://vulnerability.circl.lu/sighting/1229fa09-a40e-47a7-aff6-42314ad199c6/export 2026-08-23T18:03:08.474127+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1229fa09-a40e-47a7-aff6-42314ad199c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4scsaucho3ich", "content": "CVE-2026-77776 - Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated Identity\nCVE ID : CVE-2026-77776\n \n Published : Aug. 21, 2026, 11:22 a.m. | 33\u00a0minutes ago\n \n Description : Headroom's LLM proxy derives the memory owner from the x-headroo...", "creation_timestamp": "2026-08-21T12:13:30.073659Z"} 2026-08-21T12:13:30.073659+00:00 https://vulnerability.circl.lu/sighting/76c223bf-07f2-4f6b-9f33-c6a33b08a7bb/export 2026-08-23T18:03:08.474195+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "76c223bf-07f2-4f6b-9f33-c6a33b08a7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77776", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtlpl4zilt2n", "content": "CVE-2026-77776: Headroom Labs Headroom (CRITICAL) lets remote attackers bypass auth using x-headroom-user-id, fully compromising user LLM memory. Deploy with strict access controls & enable authentication. https://radar.offseq.com/threat/cve-2026-77776-authorization-bypass-through-user-controlled...", "creation_timestamp": "2026-08-21T12:00:34.435943Z"} 2026-08-21T12:00:34.435943+00:00 https://vulnerability.circl.lu/sighting/62c3d447-9bb8-4742-b795-027221acf78a/export 2026-08-23T18:03:08.474259+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "62c3d447-9bb8-4742-b795-027221acf78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77776", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117133386151660614", "content": "CRITICAL: CVE-2026-77776 in Headroom Labs Headroom (<0.36.1) allows unauth'd attackers to spoof x-headroom-user-id and access/modify any user's LLM memory. Default configs expose this via 0.0.0.0 binding. Restrict access & use auth tokens. https://radar.offseq.com/threat/cve-2026-77776-authorization-bypass-through-user-controlled-key-in-headroom-labs-headroom-0c2eff15c1a3dc1f #OffSeq #CVE #infosec #LLM", "creation_timestamp": "2026-08-21T12:00:33.474614Z"} 2026-08-21T12:00:33.474614+00:00