CVE-2026-93574 PUBLISHED

Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing

Assigner: redhat
Reserved: 18.09.2026 Published: 18.09.2026 Updated: 18.09.2026

A flaw was found in Netty's netty-codec-http component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes post-digit whitespace. This incorrect parsing of the chunk size can lead to HTTP request smuggling. This allows an attacker to bypass security controls or access unauthorized resources in proxy/backend deployments.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS Score: 6.5

Product Status

Vendor Red Hat
Product Red Hat AMQ Broker 7
Versions Default: affected
Vendor Red Hat
Product Red Hat AMQ Clients
Versions Default: affected
Vendor Red Hat
Product Red Hat build of Apache Camel 4 for Quarkus 3
Versions Default: affected
Vendor Red Hat
Product Red Hat build of Apache Camel for Spring Boot 4
Versions Default: affected
Vendor Red Hat
Product Red Hat build of Apicurio Registry 3
Versions Default: unknown
Vendor Red Hat
Product Red Hat build of Debezium 3
Versions Default: affected
Vendor Red Hat
Product Red Hat Build of Keycloak
Versions Default: affected
Vendor Red Hat
Product Red Hat build of Quarkus
Versions Default: affected
Vendor Red Hat
Product Red Hat Data Grid 8
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: unknown
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: unknown
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: unknown

Workarounds

See https://github.com/netty/netty/security/advisories/GHSA-j4mg-hqgv-34qc for fixed versions and remediation guidance.

References

Problem Types

  • Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') CWE