A vulnerability was found in Fastify up to 5.8.4. It has been classified as problematic. This impacts an unknown function of the component Header Handler. Performing a manipulation of the argument Content-Type results in improper validation of specified type of input.

This vulnerability was named CVE-2026-33806. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.