CVE-2025-66570: Cpp Untrusted Ip Forwarding Headercve-2025-66570-cpp-untrusted-ip-forwarding-header
HTTP forwarding headers X-Forwarded-For and X-Real-IP are client-controlled values that flow into a security-sensitive operation without trusted proxy validation. Any unauthenticated client can forge these headers to spoof their source IP, poison access logs, and bypass IP-based authorization checks (CVE-2025-66570 / CWE-290). Use the socket-level remote add
