EUVD-2026-66409

Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privilege or perform an authorization bypass by sending certain values that the attach-consumer-label plugin does not sanitise correctly. This issue affects Apache...

CVE-2026-63041

Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privilege or perform an authorization bypass by sending certain values that the attach-consumer-label plugin does not sanitise correctly. This issue affects Apache...

CVE-2026-63041

This vulnerability affects the attach-consumer-label plugin in Apache APISIX , an API gateway. The plugin fails to strip client-supplied consumer-label headers, leading to a reliance on untrusted inputs in security decisions . An attacker can send crafted header values to escalate privileges or b...