CVE-2026-111812

A flaw was found in Apache Traffic Server's originserverauth plugin. An unauthenticated remote attacker can exploit this vulnerability to force the proxy into signing attacker-controlled Amazon Web Services AWS request headers using the proxy server's own credentials. This allows the attacker to...