CVE-2026-67181

Name of the Vulnerable Software and Affected Versions Rouille versions 0.3.3 through 3.6.2

Description An HTTP request smuggling issue exists due to improper header forwarding within the proxy implementation located in src/proxy.rs. The proxy forwards the client's Transfer-Encoding header to upstream backends without modification, even though the request body has already been de-chunked by tiny http. This allows for CL.TE desynchronization attacks, where a remote attacker can manipulate the boundaries of HTTP messages to control where the backend server perceives the request body ends.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.