CVE-2026-24853 | Caido up to 0.54.x Service Port 8080 X-Forwarded-Host authentication spoofing (GHSA-3q5q-p8vj-8783)

A vulnerability marked as critical has been reported in Caido up to 0.54.x. Affected is an unknown function of the component Service Port 8080. Performing a manipulation of the argument X-Forwarded-Host results in authentication bypass by spoofing.

This vulnerability was named CVE-2026-24853. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.