BadHost Vulnerability in Starlette Framework Puts Millions of AI Agents at Critical Risk
A critical vulnerability in Starlette, an open source Python framework with 325 million weekly downloads, threatens millions of AI agents worldwide. Dubbed BadHost and tracked as CVE-2026-48710, the flaw allows attackers to bypass security checks and steal sensitive data including credentials, clinical trial databases, and personal information. Security researchers warn the 7/10 severity rating understates the actual risk.