The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, cross-host request replay updates the current request but leaves the target request and related proxy context pointing at the original origin. Connection-pool selection, CONNECT handling, realm selection, and TLS setup can consequently send the original host's path, Host header, Authorization credentials, or plaintext request to the replay destination. Documented ResponseFilter failover and retry paths can trigger the replay. This issue is fixed in versions 3.0.13 and 2.16.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and
    asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, cross-host request replay updates the
    current request but leaves the target request and related proxy context pointing at the original origin.
    Connection-pool selection, CONNECT handling, realm selection, and TLS setup can consequently send the
    original host's path, Host header, Authorization credentials, or plaintext request to the replay
    destination. Documented ResponseFilter failover and retry paths can trigger the replay. This issue is
    fixed in versions 3.0.13 and 2.16.1. (CVE-2026-107282)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and     asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, cross-host request replay updates the     current request but leaves the target request and related proxy context pointing at the original origin.
    Connection-pool selection, CONNECT handling, realm selection, and TLS setup can consequently send the     original host's path, Host header, Authorization credentials, or plaintext request to the replay     destination. Documented ResponseFilter failover and retry paths can trigger the replay. This issue is     fixed in versions 3.0.13 and 2.16.1. (CVE-2026-107282)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
474116	Echo: org.asynchttpclient:async-http-client: security update to 2.16.1	Tenable Cloud Security	Echo Local Security Checks	Local	critical
474116	Echo: org.asynchttpclient:async-http-client: security update to 2.16.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
473899	SCA: security update for org.asynchttpclient:async-http-client (GHSA-jmqq-x5g9-9p2w)	Tenable Cloud Security	SCA Checks	Local	critical
473899	SCA: security update for org.asynchttpclient:async-http-client (GHSA-jmqq-x5g9-9p2w)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
364264	Linux Distros Unpatched Vulnerability : CVE-2026-107282	Nessus	Misc.	Local	critical

Detections

Analytics

CVE-2026-107282

critical

Tenable Plugins

critical

critical

critical

critical

critical