CVE-2026-108334

A flaw was found in the internal WebAssembly WASM shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create o...

CVE-2026-108334

A flaw in the Kuadrant operator internal WebAssembly (WASM) shim allows for Expression Language Injection (CWE-917). When generating CEL predicates for Gateway-level authentication and rate limiting, the shim fails to correctly escape values from HTTPRoute match fields. An attacker with permissio...

CVE-2026-108334

A flaw was found in the internal WebAssembly WASM shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create o...