Host Header Injection is a type of input validation vulnerability in which an attacker manipulates the HTTP Host header to exploit applications that rely on user-supplied host values for security-critical operations, thereby enabling cache poisoning, password reset poisoning, or access control bypass.