Threats tagged 'ghsa-54m9-qc5w-93rc'

1 threat

Threats tagged 'ghsa-54m9-qc5w-93rc'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.5%	CVE-2026-108863Plano · Missing Authentication for Critical Function High8.7EPSS 0.5%2026-10-11CVE Database V5CVE-2026-108863 Katanemo Plano versions up to 0.4.37 have a missing authentication vulnerability that exposes the Envoy admin interface on port 9901 to unauthenticated network attackers. This allows attackers to access the /config_dump endpoint and read sensitive LLM provider API keys in plaintext from the WASM filter configuration. EPSS 0.5%Vulnerability Katanemo #ghsa-54m9-qc5w-93rc	CVE Database V5	2026-10-11

Showing 1–1 of 1 result