A flaw dubbed "BadHost" affects Starlette, a package seeing 325 million weekly downloads. This vulnerability puts millions of AI agents and web applications at risk of host-header attacks. Developers must update immediately to prevent unauthorized request routing. The scale of the exposure makes this a high-priority patch for agentic infrastructure.