Exploit for CVE-2026-48595

CVE-2026-48595 - elixir-tesla tesla Vulnerability Quick Us...

CVE-2026-48595

Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects. Tesla.Middleware.FollowRedirects strips security-sensitive headers on cross-origin redirects using a case-sensitive string comparison against a...

CVE-2026-48595

creationtimestamp| type| source ---|---|--- 2026-06-02 20:47:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mndhqfcwzz23 2026-06-06 11:00:14+00:00| published-proof-of-concept| Telegram/MkZOGQrZR4dMhKDK0OVbcEjJF0IE8jmF8NR0mdJeKW4f6Q 2026-06-09 15:00:12+00:00|...

CVE-2026-48595

The CVE-2026-48595 entry describes an Authorization header leakage in Tesla’s Elixir Tesla middleware (FollowRedirects) due to a case-sensitive comparison against a lowercase filter list for headers like Authorization/host. HTTP header names are case-insensitive, but Tesla preserves header keys a...