This leaves it vulnerable to HTTP request smuggling attacks. These attacks exploit inconsistencies in how HTTP requests are parsed and can allow attackers to bypass security controls, inject malicious payloads, or compromise backend systems. An insecure desync mitigation mode increases the risk of malicious actors exploiting your Application Load Balancer to execute HTTP desync attacks. These can lead to unauthorized access, data breaches, service disruptions, or manipulation of traffic flows.
