CVE Explorer

CVE-2026-50197

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the opaAuthorizeRequestWithBody filter and OpenPolicyAgentInstance.ExtractHttpBodyOptionally in filters/openpolicyagent/openpolicyagent.go produce an empty raw_body and input.parsed_body while the upstream service

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1f01d6c650be850375d4a29db8a824ba27fd8843949f6c2bf8a6b808387e483a

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"skipper","vendor":"zalando","versions":[{"status":"affected","version":"< 0.26.10"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:cc17add6d9fc406a87f27d82169a09a9ef71d5d3ba4ff0243a4c7a3640bc2d37 · sha256:a67bd9545133c639… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":7.8,"baseSeverity":"HIGH","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE"},"metric_type":"cvssV4_0"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:cc17add6d9fc406a87f27d82169a09a9ef71d5d3ba4ff0243a4c7a3640bc2d37 · sha256:a67bd9545133c639… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion

{"cweId":"CWE-444","description":"CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:cc17add6d9fc406a87f27d82169a09a9ef71d5d3ba4ff0243a4c7a3640bc2d37 · sha256:a67bd9545133c639… · /containers/cna/problemTypes/0/descriptions/0

Source references

5 source assertions

{"name":"https://github.com/zalando/skipper/commit/3152f3b0bb52ca89c3564be42434db0a2a1cea23","tags":["x_refsource_MISC"],"url":"https://github.com/zalando/skipper/commit/3152f3b0bb52ca89c3564be42434db0a2a1cea23"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cc17add6d9fc406a87f27d82169a09a9ef71d5d3ba4ff0243a4c7a3640bc2d37 · sha256:a67bd9545133c639… · /containers/cna/references/2

{"name":"https://github.com/zalando/skipper/pull/4041","tags":["x_refsource_MISC"],"url":"https://github.com/zalando/skipper/pull/4041"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cc17add6d9fc406a87f27d82169a09a9ef71d5d3ba4ff0243a4c7a3640bc2d37 · sha256:a67bd9545133c639… · /containers/cna/references/1

{"name":"https://github.com/zalando/skipper/releases/tag/v0.26.10","tags":["x_refsource_MISC"],"url":"https://github.com/zalando/skipper/releases/tag/v0.26.10"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cc17add6d9fc406a87f27d82169a09a9ef71d5d3ba4ff0243a4c7a3640bc2d37 · sha256:a67bd9545133c639… · /containers/cna/references/3

{"name":"https://github.com/zalando/skipper/security/advisories/GHSA-659f-rgp5-w4wf","tags":["x_refsource_CONFIRM"],"url":"https://github.com/zalando/skipper/security/advisories/GHSA-659f-rgp5-w4wf"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cc17add6d9fc406a87f27d82169a09a9ef71d5d3ba4ff0243a4c7a3640bc2d37 · sha256:a67bd9545133c639… · /containers/cna/references/0

{"tags":["exploit"],"url":"https://github.com/zalando/skipper/security/advisories/GHSA-659f-rgp5-w4wf"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cc17add6d9fc406a87f27d82169a09a9ef71d5d3ba4ff0243a4c7a3640bc2d37 · sha256:a67bd9545133c639… · /containers/adp/0/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer