PT-2026-71986 · Github · Chi
CVSS v4.0
6.9
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
go-chi/chi versions prior to 5.3.0
Description
The RealIP middleware (middleware/realip.go) allows IP spoofing because the
realIP() function reads client-controlled headers and overwrites r.RemoteAddr without verifying if the request came from a trusted proxy. Affected headers include True-Client-IP, X-Real-IP, and X-Forwarded-For. This allows attackers to provide arbitrary IP addresses to bypass IP-based access controls, evade geo-IP restrictions and rate limiting, and pollute audit logs.Recommendations
Update to version 5.3.0.
As a temporary mitigation, restrict the use of the RealIP middleware until the update is applied.
Exploit
Fix
Authentication Bypass by Spoofing
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Chi