A vulnerability was found in caddyserver caddy up to 2.11.1. It has been classified as problematic. The impacted element is the function
repl.ReplaceAll of the component Request Header Handler. The manipulation leads to information disclosure.
This vulnerability is uniquely identified as CVE-2026-30852. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.
