Web AI Firewall Vulnerability in Anubis Affects User Connection Security
CVE-2026-62314

5.8MEDIUM

Key Information:

Vendor

Techarohq

Status
Anubis
Vendor
CVE Published:
15 July 2026

What is CVE-2026-62314?

A vulnerability in the Anubis Web AI Firewall Utility allows HTTP clients to bypass security challenges due to improper validation of the client-controlled X-Original-URI header. This issue can lead to unauthorized access by matching allow rules configured for the firewall. The problem has been addressed in version 1.26.0-pre1, enhancing the validation process for incoming requests.

Affected Version(s)

anubis >= 1.22.0, < 1.26.0-pre1

References

https://github.com/TecharoHQ/anubis/security/advisories/G...
x_refsource_CONFIRM
https://github.com/TecharoHQ/anubis/pull/1630
x_refsource_MISC
https://github.com/TecharoHQ/anubis/commit/276b537776b281...
x_refsource_MISC

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.