CVE-2026-91163

The Warpgate bastion host (versions prior to 0.29.0 ) contains a vulnerability in its Kubernetes protocol listener. The component warpgate-protocol-kubernetes/src/server/client_certs.rs uses AcceptAnyClientCert to accept certificates at the TLS layer, deferring validation to warpgate-protocol-kub...

PT-2026-136997

Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/client certs.rs to accept certificates at the TLS layer and defer validation to...

CVE-2026-91163: warp-tech warpgate: Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux

Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/clientcerts.rs to accept certificates at the TLS layer and defer validation to...