What is CVE-2026-48598?

CVE-2026-48598 is a vulnerability in Elixir-tesla Tesla, classified under Improper Encoding or Escaping of Output. Published 2026-06-02.

Is CVE-2026-48598 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Elixir-tesla Tesla

CVE-2026-48598

Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values. Tesla.Multipart.part_headers_for_disposition/1 interpolates each dispos…

EPSS: 0.001 (4.0th percentile) — read the EPSS interpretation.

Affected products

Elixir-tesla Tesla — versions 0.8.0, 6ebfdb9abe9c6f119408045b933d82462decd351

Weakness classification (CWE)

CWE-116 — Improper Encoding or Escaping of Output

Public proof-of-concept exploits

workshops-de/google_gax

References

6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)

Frequently asked questions

What is CVE-2026-48598?: CVE-2026-48598 is a vulnerability in Elixir-tesla Tesla, classified under Improper Encoding or Escaping of Output. Published 2026-06-02.
Is CVE-2026-48598 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.