Undici v7.23.08.1.0: Cross-Origin Request Leak via Socks5ProxyAgent
CVE-2026-6734 Published on June 17, 2026

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requests are dispatched through the pool connected to the first origin, regardless of the intended destination. This causes cross-origin request routing: credentials and request data intended for origin B are sent to origin A, responses from the wrong origin are trusted, and HTTPS requests may be silently downgraded to HTTP. Impacted users are applications that use Socks5ProxyAgent (directly or via setGlobalDispatcher) and make requests to more than one origin. This was introduced in undici 7.23.0 via PR #4385 and affects all versions through 8.1.0. Patches: Upgrade to undici v7.26.0 or v8.2.0. Workarounds: Use a separate Socks5ProxyAgent instance per origin, or avoid using Socks5ProxyAgent with multiple origins.

NVD

Vulnerability Analysis

CVE-2026-6734 is exploitable with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:

NETWORK

Attack Complexity:

HIGH

Privileges Required:

LOW

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

HIGH

Weakness Types

Origin Validation Error

The software does not properly verify that the source of data or communication is valid.

Improper Verification of Source of a Communication Channel

The software establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin. When an attacker can successfully establish a communication channel from an untrusted origin, the attacker may be able to gain privileges and access unexpected functionality.

Products Associated with CVE-2026-6734

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Hummingbird

Red Hat Cryostat

Red Hat Openshift Pipelines

Red Hat Podman Desktop

Red Hat Rhdh

Red Hat Enterprise Linux (RHEL)

Red Hat Openshift Ai

Red Hat Openshift

Red Hat Openshift Data Foundation

Red Hat Openshift Devspaces

Red Hat Ansible Portal

Red Hat Amq Broker

Red Hat Cluster Observability Operator

Affected Versions

undici:

Version 7.23.0 and below 7.26.0 is affected.
Version 7.26.0 is unaffected.
Version 8.0.0 and below 8.2.0 is affected.
Version 8.2.0 is unaffected.

Red Hat Cryostat 4 on RHEL 9:

Version 4.2.0-13 and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 1:24.18.0-1.el10_2 and below * is unaffected.

Red Hat Enterprise Linux 8:

Version 8100020260630152626.6d880403 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 9080020260626074955.rhel9 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782840519 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782839981 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782839193 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782838753 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782841925 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782844225 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782839658 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782838476 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782839494 and below * is unaffected.

Red Hat Developer Hub 1.10:

Version 1783448184 and below * is unaffected.

Red Hat Developer Hub 1.9:

Version 1784210921 and below * is unaffected.

Red Hat Hardened Images:

Version 26.3.0-1.2.hum1 and below * is unaffected.

Red Hat Hardened Images:

Version 1.96.0-1.hum1 and below * is unaffected.

Red Hat Hardened Images:

Version 24.18.0-0.3.hum1 and below * is unaffected.

Red Hat Hardened Images:

Version 25.9.0-1.1.hum1 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787121387 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786705347 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706101 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786705558 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786705646 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706138 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786705741 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786705777 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786705802 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786705938 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706577 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706125 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706177 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706188 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706679 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706357 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706612 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706644 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706659 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1786706880 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786701839 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786701555 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702052 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702559 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702713 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702264 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702448 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702276 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702440 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702315 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786703071 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702563 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702636 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702623 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786703137 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702716 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702872 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702949 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786702917 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1786703143 and below * is unaffected.