mehranturk/cve-2026-31908Proof-of-concept exploit for CVE-2026-31908, a critical header injection vulnerability in Apache APISIX, demonstrating authentication bypass and privilege escalation through CRLF injection in the forward-auth plugin.
This is a Proof of Concept (PoC) exploit for CVE-2026-31908, a critical header injection vulnerability discovered in Apache APISIX versions 2.12.0 through 3.15.0.
The vulnerability exists in the forward-auth plugin, where improper sanitization of CRLF (\r\n) sequences allows unauthenticated attackers to inject malicious HTTP headers. This can lead to authentication bypass, privilege escalation, and unauthorized access to protected resources.
⚠️ IMPORTANT: This tool is for educational purposes and authorized security testing only. Use only in isolated lab environments or on systems you own.
| Attribute | Value |
|---|---|
| CVE ID | CVE-2026-31908 |
| Severity | Critical |
| CVSS Score | 10.0 / 10 |
| Attack Vector | Network |
| Attack Complexity | Low |
| Privileges Required | None |
| User Interaction | None |
| Confidentiality Impact | High |
| Integrity Impact | High |
| Weakness Type | CWE-75 (Failure to Sanitize Special Elements) |
requests library# Clone the repository
git clone https://github.com/MehranTurk/CVE-2026-31908.git
cd CVE-2026-31908
# Install dependencies
pip install -r requirements.txt
# Make the script executable (Linux/macOS)
chmod +x CVE-2026-31908.py
If this tool was helpful, you can support its development ❤️
| Currency | Address |
|---|---|
| USDT / TRX | TSVd8USqUv1B1dz6Hw3bUCQhLkSz1cLE1v |
| BTC | 32Sxd8UJav7pERtL9QbAStWuFJ4aMHaZ9g |
| ETH | 0xb2ba6B8CbB433Cb7120127474aEF3B1281C796a6 |
| LTC | MEUoFAYLqrwxnUBkT4sBB63wAypKEdyewy |
© 2026 MehranTurk — All rights reserved.