PT-2026-29857 · Rack+2 · Rack+2

Th4S1S · Published 2026-04-02 · Updated 2026-04-17 · CVE-2026-34835

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Rack versions 3.0.0.beta1 through 3.1.21, and 3.2.0 through 3.2.6 are affected by an issue where the Rack::Request component improperly parses the Host header, accepting characters not permitted in RFC-compliant hostnames such as /, ?, #, and @. This can lead to host header poisoning in applications that use req.host, req.url, or req.base url for link generation, redirects, or origin validation. The issue is due to the use of an overly permissive regular expression for parsing the authority component of the Host header. Applications performing naive host validation may be vulnerable.

Recommendations: Update to Rack version 3.1.21 or 3.2.6 or later.

Exploit

Fix

Weakness Enumeration

CWE-1286

Related Identifiers

CVE-2026-34835

GHSA-G2PF-XV49-M2H5

USN-8182-1

Affected Products

Linuxmint

Rack

Ubuntu

References · 24

• 🔥 https://github.com/rack/rack/security/advisories/GHSA-g2pf-xv49-m2h5 · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34835.yml · Exploit
• https://ubuntu.com/security/CVE-2026-34826 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8182-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34786 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34785 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-26961 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34763 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34827 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34835 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34835 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34835 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34831 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34835 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-34835 · Vendor Advisory