CVE-2026-63329

Katalog CVE

CVSS 4.9 · Medium EPSS 0,31%

Kerentanan Improper Encoding or Escaping of Output. Skor CVSS 3.1 4.9 (Medium) menurut github.com.

Deskripsi (NVD)

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.6, copy_server_request in warpgate-protocol-http/src/proxy.rs forwards a client-supplied x-warpgate-username header before inject_own_headers appends the authenticated username. Because the request builder preserves repeated values, a proxied backend that trusts the first x-warpgate-username value can authorize an authenticated attacker as another user. The same forwarding policy also accepts the reserved x-warpgate-authentication-type header, and warpgate-common/src/http_headers.rs does not exclude either reserved identity header. This issue is fixed in version 0.25.6.

Rincian

Terbit di NVD

21 September 2026

Terakhir diubah

24 September 2026

Status NVD

Deferred

CVSS 3.1

4.9 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-116: Improper Encoding or Escaping of Output
CWE-290: Authentication Bypass by Spoofing

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,8% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/warp-tech/warpgate/commit/c3748d7585209781b2d3a39ac9941b91d11d9b77
• https://github.com/warp-tech/warpgate/releases/tag/v0.25.6
• https://github.com/warp-tech/warpgate/security/advisories/GHSA-862h-v6cc-9757