CVE-2026-118653 | Labstack Echo up to 5.0.x RateLimiter Context.RealIP X-Forwarded-For/X-Real-IP privileges management

SecurityVulns
Yanac

A vulnerability labeled as problematic has been found in Labstack Echo up to 5.0.x. This vulnerability affects the function Context.RealIP of the component RateLimiter. Executing a manipulation of the argument X-Forwarded-For/X-Real-IP can lead to improper privilege management.

This vulnerability is registered as CVE-2026-118653. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More