CVE-2026-108863: Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API keys in plaintext from the WASM filter configuration.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of Katanemo Plano through 0.4.37 are exposed when an attacker can reach the host's port 9901. The Envoy admin interface is bound to all host interfaces, so exposure can extend beyond localhost depending on network access controls.
What can an unauthenticated attacker obtain?
An unauthenticated network attacker can request the Envoy /config_dump endpoint. This can disclose configured LLM provider API keys in plaintext from the WASM filter configuration.
Does exploitation require credentials or user interaction?
No. The issue is exploitable remotely with no privileges and no user interaction, provided the attacker can connect to port 9901.
How can I check whether a deployment is affected?
Determine whether the deployment is running Katanemo Plano 0.4.37 or earlier and whether port 9901 is reachable. Affected instances expose the Envoy admin interface on that port, where /config_dump can reveal configuration contents.