CVE-2026-111812

The origin_server_auth plugin in Apache Traffic Server contains a vulnerability allowing a client to force the signing of attacker-chosen AWS request headers using the proxy's own IAM credentials . This issue impacts versions 8.0.0 through 8.1.11 , 9.0.0 through 9.2.15 , 10.0.0 through 10.1.4 , a...