CVE-2026-3634 Details
Description
A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage Return Line Feed (CRLF) sequence due to improper input sanitization in the `soup_message_headers_set_content_type()` function. This vulnerability allows for the injection of arbitrary header-value pairs, potentially leading to HTTP header injection and response splitting attacks.
A CRLF injection vulnerability has been identified in libsoup, specifically in the 'soup_message_headers_set_content_type()' function. This issue arises from inadequate input sanitization, allowing an attacker to inject a Carriage Return Line Feed (CRLF) sequence into the Content-Type header. The vulnerability enables the injection of arbitrary header-value pairs, which could be exploited for HTTP header injection and response splitting attacks.
Users are advised to update to a version of libsoup that addresses this vulnerability. The recommended solution is to use the 'soup_message_headers_append()' function instead of 'soup_message_headers_append_common()' when setting the Content-Type header.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gitlab.gnome.org/GNOME/libsoup/-/issues/485 | CISA-ADP | ExploitIssue TrackingVendor Advisory |
| https://access.redhat.com/security/cve/CVE-2026-3634 | [email protected] | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2445129 | [email protected] | Issue TrackingVendor Advisory |
| https://gitlab.gnome.org/GNOME/libsoup/-/issues/485 | [email protected] | ExploitIssue TrackingVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| gnome libsoup | All versions |
CPE
Remediation
| |
| redhat enterprise linux | 6.0 7.0 8.0 9.0 10.0 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 19, 2026 | Initial Analysis | [email protected] |
| Mar 17, 2026 | CVE Modified | CISA-ADP |
| Mar 17, 2026 | New CVE Received | [email protected] |