# CVE-2026-108334: Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides

Status: published. Published: 2026-10-15. Updated: 2026-11-05.

A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create or modify an HTTPRoute attached to a shared Gateway can provide a crafted path, header, or query match value that causes the predicate to skip those checks. The request is still forwarded to the route’s backend.

## Remediation

- workaround: Until a fixed release is available, restrict HTTPRoute creation and modification for routes attached to the shared Gateway, and review or remove routes with match values that trigger the predicate injection. Where possible, enforce authentication and rate limiting at the backend as additional controls. An admission policy could reject confirmed exploit patterns, but validate it against legitimate routes; Gateway API match values can contain special characters. These measures reduce exposure but do not fix the shim. The backend and admission-policy measures are compensating controls; their effectiveness depends on the deployment and the specific route behavior (source: CNA: redhat)

## Affected products and versions

- Red Hat / Red Hat Connectivity Link 1.4 (rhcl-1/rhcl-rhel9-operator): ≥ 1791975888; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Connectivity Link 1.5 (rhcl-1/rhcl-rhel9-operator): ≥ 1792512519; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Connectivity Link 1 (rhcl-1/developer-portal-controller-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Connectivity Link 1 (rhcl-1/rhcl-operator-bundle): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI (RHOAI) (rhoai/odh-model-controller-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI (RHOAI) (rhoai/odh-model-serving-api-rhel9): Version range not reported. Source: CNA: redhat

## Severity and prioritization

- CVSS 3.1: 7.4 (high); CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L; source: CNA: redhat

- CISA KEV: No listing in collected sources

- EPSS: 0.34% as of 2026-11-05; percentile 28.02%

- SSVC: exploitation none; automatable no; technical impact partial; source ADP: CISA-ADP

- Weaknesses: CWE-917

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://access.redhat.com/errata/RHSA-2026:83531 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:88203 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/security/cve/CVE-2026-108334 (CNA: redhat; vdb-entry, x_refsource_REDHAT)

- https://bugzilla.redhat.com/show_bug.cgi?id=2548768 (CNA: redhat; issue-tracking, x_refsource_REDHAT)

- https://github.com/Kuadrant/kuadrant-operator/commit/7e667dc216e6ad38feaeadb391da59aa0380057a (CNA: redhat)

- https://github.com/advisories/GHSA-fcw2-f6v9-6ffp (CNA: redhat)

## Provenance

- CNA: redhat: https://www.cve.org/CVERecord?id=CVE-2026-108334; retrieved 2026-11-05; source updated 2026-11-05

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2026-108334; retrieved 2026-11-05; source updated Not reported

Revision: e27446d7eef433d989e769bc616e88eb1a768a0e4c6ea6cb7246177b031aaa20

Canonical: https://y2.dev/cve/CVE-2026-108334

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.