CVE-2024-6827 HTTP Request Smuggling in benoitc/gunicorn
Attackers can exploit HTTP request smuggling in Gunicorn to poison caches, expose data, or bypass security controls due to improper Transfer-Encoding validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-6827?
CVE-2024-6827 is a high-severity vulnerability in benoitc/gunicorn, published on 20 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.
Weakness: CWE-444
Which versions are affected by CVE-2024-6827?
3 open source packages ship an affected version, including gunicorn.
| Package | Affected | Fixed in |
|---|---|---|
gunicorn PyPI | All versions | 22.0.0 |
gunicorn PyPI | All versions | 22.0.0 |
gunicorn PyPI | All versions | 22.0.0 |
Linux distribution packages (14)
python-gunicorn SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 20.1.0-150400.12.9.1 |
python-gunicorn SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 20.1.0-150400.12.9.1 |
python-gunicorn SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 20.1.0-150400.12.9.1 |
python-gunicorn SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 20.1.0-150400.12.9.1 |
python-gunicorn SUSE:Linux Enterprise Module for Public Cloud 15 SP3 | All versions | 19.7.1-150000.3.10.1 |
python-gunicorn SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | All versions | 19.7.1-150000.3.10.1 |
python-gunicorn SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | All versions | 19.7.1-150000.3.10.1 |
python-gunicorn SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | All versions | 19.7.1-150000.3.10.1 |
python-gunicorn SUSE:Linux Enterprise Module for Python 3 15 SP6 | All versions | 20.1.0-150400.12.9.1 |
python-gunicorn SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 20.1.0-150400.12.9.1 |
python-gunicorn SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 20.1.0-150400.12.9.1 |
python-gunicorn SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 20.1.0-150400.12.9.1 |
python-gunicorn SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 20.1.0-150400.12.9.1 |
python-gunicorn openSUSE:Leap 15.6 | All versions | 20.1.0-150400.12.9.1 |
How do I fix CVE-2024-6827?
Upgrade gunicorn to 22.0.0 or later.
Is CVE-2024-6827 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-6827 exists.
Sources
Also known as CLSA-2026-1772496718, CLSA-2026-1772496723, DEBIAN-CVE-2024-6827, ECHO-b35c-9032-db2f, GHSA-hc5x-x2vx-497g, OESA-2026-3657 and 7 more.