CERT24CVE-2026-108334 — CEL predicate injection in the Kuadrant operator’s internal WASM shimLoading data…
CERT24Threat Observatory
Period

CVE-2026-108334 — CEL predicate injection in the Kuadrant operator’s internal WASM shim

A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. Values from HTTPRoute match fields are not correctly escaped when generating the CEL predicate, which can cause Gateway-level authentication and rate-limiting checks to be skipped.

← Back to intelligence

CVE-2026-108334 — CEL predicate injection in the Kuadrant operator’s internal WASM shim

A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. Values from HTTPRoute match fields are not correctly escaped when generating the CEL predicate, which can cause Gateway-level authentication and rate-limiting checks to be skipped.