Skip to content
OpenAdvisories

Vendor

Headroom Labs

2 known vulnerabilities.

Products

Headroom 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-77776

    Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated Identity

    Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the value to the…

    Headroom Labs Headroom