CVE-2026-91163

The Warpgate bastion host (versions prior to 0.29.0 ) contains a vulnerability in its Kubernetes protocol listener. The component warpgate-protocol-kubernetes/src/server/client_certs.rs uses AcceptAnyClientCert to accept certificates at the TLS layer, deferring validation to warpgate-protocol-kub...