CVE-2026-93750

A flaw was found in http-cache-semantics. This vulnerability allows a remote attacker to disclose sensitive information across clients. The _varyMatches() function fails to properly validate Vary header wildcards, enabling an attacker to request URLs previously fetched by other clients and receive cached responses intended for different users. This leads to unauthorized information disclosure.

Red Hat rates this vulnerability as a Moderate impact because exploiting the flaw depends on specific deployment prerequisites, notably a shared caching intermediary handling responses with Vary headers. Although flawed header matching can permit an attacker to retrieve cached HTTP responses intended for other users, the issue does not allow modifying cached objects or executing arbitrary code. The scope of impact is limited to information disclosure and requires knowledge of target endpoints prior to cache expiration.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.