CVE-2026-71416: Headroom WebSocket proxy spends your OpenAI key for any reachable browser
How to fix CVE-2026-71416: upgrade headroom-ai to 0.35.0 If a browser on your network can open ws://your-host:8787/v1/responses , it can ride Headroom's…
HCS (Hashgraph Consensus Service) Blog4 min read