Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:katanemo:plano:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Unauthenticated Exposure of Envoy Admin Interface in Katanemo Plano

Katanemo Plano versions 0.4.37 and earlier contain a missing authentication vulnerability on the Envoy admin interface that allows unauthenticated remote attackers to exfiltrate LLM provider API keys.

Plano vulnerability exposure envoy credential-theft
1r 1t 1c