Sensitive Information Disclosure

routesrv is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the lack of authentication on HTTP endpoints exposing routing and cache topology data, which allows an attacker with network access to retrieve sensitive cluster-wide configuration and infrastructure informati...

PT-2026-60892

Name of the Vulnerable Software and Affected Versions Skipper affected versions not specified Description The routesrv component exposes sensitive cluster-wide routing and cache infrastructure data over plain HTTP without any authentication. This allows any pod within the Kubernetes cluster to...