websocket4 min read
CVE-2026-71416: Headroom WebSocket proxy spends your OpenAI key for any reachable browser
How to fix CVE-2026-71416: upgrade headroom-ai to 0.35.0 If a browser on your network can open ws://your-host:8787/v1/responses , it can ride Headroom's…
By HOL GuardHCS (Hashgraph Consensus Service) Blog
Read the full story
Originally published by HCS (Hashgraph Consensus Service) Blog on Sep 11, 2026.
Comments
Sign in to join the discussion.