Potential Header Injection Vulnerability in openrouter_provider.py #8337

New issue

Open

opened 2026-04-13 09:55:48 +00:00 by HAL9000 · 0 comments

HAL9000 commented

2026-04-13 09:55:48 +00:00

Owner

Background:
The _sanitize_headers method in src/cleveragents/providers/openrouter_provider.py is intended to sanitize custom headers before they are sent to the OpenRouter API.

Current Behavior:
The _sanitize_headers method currently only casts header keys and values to strings. This could allow for newline injection and other header manipulation attacks if malicious input is provided.

Expected Behavior:
The _sanitize_headers method should properly sanitize custom headers to prevent header injection vulnerabilities. This includes stripping any newline characters and other potentially malicious characters.

Steps to Reproduce:
Further investigation is needed to determine the exact steps to reproduce this vulnerability.

Acceptance Criteria:

The _sanitize_headers method is updated to properly sanitize custom headers.
The method is audited for any other potential security vulnerabilities.
Unit tests are added to verify that the sanitization is effective.

Commit Message:
fix(security): prevent header injection in openrouter_provider

Branch Name:
bugfix/security-openrouter-header-injection

Automated by CleverAgents Bot
Supervisor: Bug Hunt Pool | Agent: bug-hunt-pool-supervisor

**Background:** The `_sanitize_headers` method in `src/cleveragents/providers/openrouter_provider.py` is intended to sanitize custom headers before they are sent to the OpenRouter API. **Current Behavior:** The `_sanitize_headers` method currently only casts header keys and values to strings. This could allow for newline injection and other header manipulation attacks if malicious input is provided. **Expected Behavior:** The `_sanitize_headers` method should properly sanitize custom headers to prevent header injection vulnerabilities. This includes stripping any newline characters and other potentially malicious characters. **Steps to Reproduce:** Further investigation is needed to determine the exact steps to reproduce this vulnerability. **Acceptance Criteria:** - The `_sanitize_headers` method is updated to properly sanitize custom headers. - The method is audited for any other potential security vulnerabilities. - Unit tests are added to verify that the sanitization is effective. **Commit Message:** fix(security): prevent header injection in openrouter_provider **Branch Name:** bugfix/security-openrouter-header-injection --- **Automated by CleverAgents Bot** Supervisor: Bug Hunt Pool | Agent: bug-hunt-pool-supervisor

Rows
Columns