CVE-2026-49231

CVE-2026-49231 describes an Authentication Bypass by Spoofing in the APISIX opa plugin. Affected software: Apache APISIX versions 3.5.0 through 3.16.0. Root cause: spoofed identity headers relayed to upstream due to non-default configuration in the opa plugin. Impact: an attacker could assume hig...