CVE-2026-48144 is an Improper Validation of Certificate with Host Mismatch vulnerability affecting Apache Thrift's c_glib bindings. The flaw allows potential man-in-the-middle attacks due to improper TLS certificate hostname validation. All versions of Apache Thrift prior to 0.24.0 are affected. The vulnerability is classified as high severity. Users are strongly recommended to upgrade to Apache Thrift version 0.24.0, which contains the fix. The issue was publicly disclosed via Apache mailing lists and the OpenWall security list. No active exploitation has been mentioned, but the nature of the vulnerability poses significant risk in environments relying on secure TLS communications.