Skip to content
Threat Feed
Subscribe

Vendor

Katanemo

1 brief RSS
high advisory

Unauthenticated Exposure of Envoy Admin Interface in Katanemo Plano

Katanemo Plano versions 0.4.37 and earlier contain a missing authentication vulnerability on the Envoy admin interface that allows unauthenticated remote attackers to exfiltrate LLM provider API keys.

Plano vulnerability exposure envoy credential-theft
1r 1t 1c