AISlashdotabout 4 hours ago
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
2 min read
A 29-year-old bug in the Squid web proxy, tracked as CVE-2026-47729 and dubbed Squidbleed, lets an authorized proxy user retrieve fragments of another user's cleartext HTTP requests, including credentials and session tokens. The security researcher credited Anthropic's Claude Mythos Preview for the discovery. Squid describes the attack as requiring a trusted client already permitted to use the proxy.
Level
Hype check
Tap to vote and see what everyone thinks.
