Headroom versions prior to 0.35.0 contain an authentication bypass vulnerability that allows unauthorized parties to hijack LLM proxy requests, posing a critical risk to API security.

This vulnerability involves missing Origin header validation in the WebSocket server, which allows an unauthenticated remote attacker to proxy unauthorized requests to the upstream LLM provider. By leveraging a malicious client, such as a headless browser with access to the proxy, an attacker can consume stored API credentials.

The exploitation of this flaw could lead to unauthorized consumption of expensive LLM API credits, potential data exfiltration from the LLM service, and unauthorized manipulation of AI-driven workflows. With a CVSS score of 8.8, this high-severity vulnerability represents a significant risk to organizational resources and the integrity of AI-integrated applications.

Immediate Action: Upgrade the Headroom software to version 0.35.0 or later immediately to implement mandatory Origin header validation.

Proactive Monitoring: Inspect WebSocket connection logs for requests originating from unexpected or untrusted origins and monitor LLM API usage spikes that deviate from established baselines.

Compensating Controls: Deploy a Web Application Firewall (WAF) or a reverse proxy configured to strictly enforce Origin header checks and restrict access to the WebSocket endpoint to known, trusted IP ranges.

Public Exploit Available: No confirmed public exploit (weaponized or otherwise) is available in the provided data.

The vulnerability in Headroom poses a severe risk to any environment where LLM API keys are stored in the environment. Administrators must prioritize the update to version 0.35.0 to ensure that WebSocket requests are properly validated. Failure to patch may result in financial loss or unauthorized access to AI capabilities.