CVE-2025-59152 | litestar 2.17.0 Header cache_key_from_request X-Forwarded-For reliance on untrusted inputs in a security decision

A vulnerability classified as problematic was found in litestar 2.17.0. The affected element is the function cache_key_from_request of the component Header Handler. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision.

This vulnerability is listed as CVE-2025-59152. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.