Cross-Origin Redirect Vulnerability in C++ HTTP Library by Yhirose
CVE-2026-102944
7.5HIGH
What is CVE-2026-102944?
The cpp-httplib library, which facilitates HTTP/HTTPS communication in C++, contains a vulnerability that impacts how it handles cross-origin redirects. In versions prior to 0.51.0, when performing a redirect of certain status codes (301, 302, 307, or 308), the library incorrectly retains Cookie headers. This flaw could allow an attacker controlling a redirect response or positioned on the network to intercept session cookies meant for the original domain. This could lead to unauthorized access or session hijacking. The issue has been addressed in version 0.51.0.
Affected Version(s)
cpp-httplib < 0.51.0