Skip to content
Heist/ feed
High

Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy

Type: advisorySource: Official CVE List1 source record

A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only the first HTTP request on a TCP connection has its path rewritten. An attacker can send a pipelined second request that is relayed verbatim to the backend, bypassing the configured path restrictions. This allows accessing arbitrary paths on the backend server that were not intended to be exposed through the proxy.

Announced Source revision 1
Original source ↗

CVE-2026-88829

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-88829

Red Hat Hardened Images

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/a:redhat:hummingbird:1"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Hardened Images",
    "packageName": "busybox",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-88829

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#28984 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement