Vulnerability · Published Oct 11, 2026 · Assigned by VulnCheck
CVE-2026-108863Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface
High 7.5
In plain English
A high-severity missing authentication in Plano from Katanemo. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 52.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /config_dump endpoint to read configured LLM provider API keys in plaintext from the WASM filter configuration.
Affected products (as reported)
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/katanemo-plano-envoy-admin-config-secret-disclosure third-party-advisory
- https://github.com/katanemo/plano/blob/0.4.37/config/envoy.template.yaml#L1-L3 technical-description
- https://github.com/katanemo/plano/blob/0.4.37/cli/planoai/config_generator.py#L588-L656 technical-description
- https://github.com/katanemo/plano product
- VulnCheck Advisory: Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface third-party-advisory
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-108863-katanemo-plano-envoy-admin-config-secret-disclosure exploit