CVE-2026-114437 | go-chi up to 5.3.x ClientIPFromXFF middleware middleware.GetClientIP improper authentication

October 21, 2026 Yanac

A vulnerability was found in go-chi chi up to 5.3.x and classified as critical. Affected by this vulnerability is the function middleware.GetClientIP of the component ClientIPFromXFF middleware. Such manipulation leads to improper authentication.

This vulnerability is referenced as CVE-2026-114437. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More