The vulnerability exists in libsoup's HTTP/1 header parsing logic within Red Hat Enterprise Linux 10. Specifically, the soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without checking for duplicate or conflicting Content-Length headers. This flaw enables an attacker to craft HTTP requests containing multiple Content-Length headers with differing values, potentially leading to HTTP request smuggling attacks. The CVSS 3.1 base score is 3.7 (low severity) with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and low integrity impact. The vendor advisory linked does not provide explicit remediation or patch information.

The vulnerability allows an attacker to send specially crafted HTTP requests with multiple conflicting Content-Length headers, which may lead to HTTP request smuggling. According to the CVSS vector, the impact on confidentiality and availability is none, with only a low impact on integrity. There are no known exploits in the wild. The overall severity is low, indicating limited potential impact.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-2708 for current remediation guidance. No explicit patch or workaround information is provided in the available vendor advisory content. Users should monitor the vendor advisory for updates and apply any official fixes once available.