What is CVE-2026-48595?

CVE-2026-48595 is a vulnerability in Elixir-tesla Tesla, classified under Improper Handling of Case Sensitivity. Published 2026-06-02.

Is CVE-2026-48595 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Elixir-tesla Tesla

CVE-2026-48595

Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects. Tesla.Middleware.FollowRedirects strips security-sensitive headers on cross-origin redi…

EPSS: 0.004 (31.9th percentile) — read the EPSS interpretation.

Affected products

Elixir-tesla Tesla — versions 1.4.0, 2d937d5813d7cda5cd726f41824985fb655c920f

Weakness classification (CWE)

CWE-178 — Improper Handling of Case Sensitivity

Public proof-of-concept exploits

jenniferreire26/CVE-2026-48595

References

6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)

Frequently asked questions

What is CVE-2026-48595?: CVE-2026-48595 is a vulnerability in Elixir-tesla Tesla, classified under Improper Handling of Case Sensitivity. Published 2026-06-02.
Is CVE-2026-48595 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.