mehranturk/cve-2026-31908Proof-of-concept exploit for CVE-2026-31908, a critical header injection vulnerability in Apache APISIX, demonstrating authentication bypass and privilege escalation through CRLF injection in the forward-auth plugin.
This is a Proof of Concept (PoC) exploit for CVE-2026-31908, a critical header injection vulnerability discovered in Apache APISIX versions 2.12.0 through 3.15.0.
The vulnerability exists in the forward-auth plugin, where improper sanitization of CRLF (\r\n) sequences allows unauthenticated attackers to inject malicious HTTP headers. This can lead to , , and to protected resources.
⚠️ IMPORTANT: This tool is for educational purposes and authorized security testing only. Use only in isolated lab environments or on systems you own.
| Attribute | Value |
|---|---|
| CVE ID | CVE-2026-31908 |
| Severity | Critical |
| CVSS Score | 10.0 / 10 |
| Attack Vector | Network |
| Attack Complexity | Low |
| Privileges Required | None |
| User Interaction | None |
| Confidentiality Impact | High |
| Integrity Impact | High |
| Weakness Type | CWE-75 (Failure to Sanitize Special Elements) |
requests library# Clone the repository
git clone https://github.com/MehranTurk/CVE-2026-31908.git
cd CVE-2026-31908
# Install dependencies
pip install -r requirements.txt
# Make the script executable (Linux/macOS)
chmod +x CVE-2026-31908.py
If this tool was helpful, you can support its development ❤️
| Currency | Address |
|---|---|
| USDT / TRX | TSVd8USqUv1B1dz6Hw3bUCQhLkSz1cLE1v |
| BTC | 32Sxd8UJav7pERtL9QbAStWuFJ4aMHaZ9g |
| ETH | 0xb2ba6B8CbB433Cb7120127474aEF3B1281C796a6 |
| LTC | MEUoFAYLqrwxnUBkT4sBB63wAypKEdyewy |
© 2026 MehranTurk — All rights reserved.