CVE-2026-117477

CVSS 6.1 (medium) · published 2026-11-10

KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL.

Weakness: CWE-113

Source: NVD CVE-2026-117477

References

• https://jvn.jp/en/vu/JVNVU92635551/
• https://kusanagi.tokyo/en/releases/27995/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.