This vulnerability involves the libsoup library used in Red Hat Enterprise Linux 10, specifically in the HTTP/1 header parsing logic. The function soup_message_headers_append_common() appends each header value without checking for duplicate or conflicting Content-Length headers. This flaw enables an attacker to craft HTTP requests with multiple Content-Length headers that have differing values, leading to inconsistent interpretation of HTTP requests, commonly known as HTTP request smuggling. The CVSS score is 3.7, indicating a low severity impact primarily on integrity, with no impact on confidentiality or availability. Red Hat has published an advisory but has not indicated an official fix or remediation status.

The vulnerability allows an attacker to send HTTP requests with multiple conflicting Content-Length headers, which may cause inconsistent parsing of HTTP requests by the server or intermediaries. This can lead to limited integrity issues, such as bypassing certain HTTP request handling logic. There is no impact on confidentiality or availability reported. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-2708 for current remediation guidance. Since no official fix or remediation level is indicated, users should monitor the vendor advisory for updates. No vendor-stated mitigation or workaround is currently provided.