VDB
RHSA-2026:83531
RHSA-2026:83531
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create or modify an HTTPRoute attached to a shared Gateway can provide a crafted path, header, or query match value that causes the predicate to skip those checks. The request is still forwarded to the route’s backend.
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:17d03d77c3de19b64d7c4e14111b2462b1199c80e9466aaa3d3aee0d3aeeb292_arm64 as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:0e90150be71939193f3608b752d7de8f9e3ff4a47b4bede87c2094ae22095bff_ppc64le as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:95fa76e5d27edb149b1ee59d4c54c63a6ddc100dbb5f5f5677357c08734d9b1b_s390x as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:647f779ab38a88626d1dd68b234ad332e6539c508c72a6856d75672eaed38e1e_amd64 as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:83a9f68981ad35914f4ce85d741f66500acf9c088e5bd5d037ed79bf73a82878_arm64 as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:6923146e13b5dde51d5123811b8aab2f3fe5186090c3d72cffb414d6ea1e1316_ppc64le as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:68c69fac90d87f765cc305ccba7627ce8c84f9c2a02843492b597be0df1cd503_ppc64le as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:3e34a3d241b6e86155489a31385314ee0550b7caf8b565240c6944a04992abf9_amd64 as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:0fab8dc4db9782df5aad2322aeeef8779bada270b959a53d894785514f648038_arm64 as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:ae7d66552252a471967affb08b61ca40d868287c2f4fd9b9e33f024c59e74eb8_s390x as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:e809522141b9792b946abebe9a3bcbd86036f49073d1559d1606ecae3e6427d2_ppc64le as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:84210479b0079c182d67feee8ca2d48de226fc5a592cd7ea0bc286282ffe05c6_arm64 as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fd6755792999aea425c5af907fc3ede902b605c69ab44f9b8b6403ab2e02a3b8_arm64 as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:56ec54c27e4541986cfcdee6c9b15932f2e07d879d59097c1a681e9debe4f511_s390x as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a86d81367c6b6b5aa437add4c8af7abb06629fbd70e7c99f374b873fdde1063d_s390x as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:12671abafe8122e5fe60a08a84cc7d5e1d75b5f722943eacff3ddf51a9ad52ef_s390x as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:2e3eb905055a94390d2db50fc7f70ad52f995ecef38a406863f5c26755a56e2e_amd64 as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:036f60748869e8dd40552f7f602c91daadf193d856d502fb3d4c887e1a2c2a25_ppc64le as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:5da958ebb5d45bbbb694835cb39dc57240415a0dd205676b4f0f30291a272d5f_amd64 as a component of Red Hat Connectivity Link 1.4 | * |
| Red Hat | registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:99c74cd4d004035d2137d1a2be09773e66b241b4e657054060bf3d53c1a44b37_amd64 as a component of Red Hat Connectivity Link 1.4 | * |
…and 1 more
Timeline
- Oct 15, 2026 CVE Published
- Oct 17, 2026 CVE Updated
- Oct 17, 2026 Distribution Patch
- Oct 17, 2026 Distribution Patch
- Oct 17, 2026 Security Advisory
- Oct 17, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:83531 advisory
- https://catalog.redhat.com/software/containers/search advisory
- https://access.redhat.com/security/cve/CVE-2026-108334 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83531.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2548768 issue
- https://www.cve.org/CVERecord?id=CVE-2026-108334 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-108334 advisory
- https://github.com/Kuadrant/kuadrant-operator/commit/7e667dc216e6ad38feaeadb391da59aa0380057a advisory
- https://github.com/advisories/GHSA-fcw2-f6v9-6ffp advisory