CVE-2026-121440

A flaw was found in Wasmtime. When processing HTTP traffic via the WebAssembly System Interface WASI, the runtime fails to validate forwarded HTTP trailers against forbidden header filtering rules. A WebAssembly guest application can exploit this vulnerability by forwarding a request or response...