Kuadrant vulnerabilities

Products

• github.com/kuadrant/authorino 2
• github.com/Kuadrant/mcp-gateway 1

Latest Kuadrant CVEs

Newest publication first

1. GHSA-g53w-w6mj-hrpp MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path

   Published 2026-05-19

   Critical·CVSS 9.3

   Summary The MCP router (ext_proc) exposes an initialize-method code path that, when a request carries an mcp-init-host header, bypasses the gateway JWT session validator and rewrites the upstream :authority header to whatever the caller chooses, gated only by a single shared head...

2. CVE-2025-25208 Rhcl: authorino denial of service through authpolicy with sharedsecretref severity

   Published 2025-06-09

   Medium·CVSS 5.7 EPSS 0.35%

   A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster

3. CVE-2025-25207 Rhcl: authpolicy callbacks result in denial of service in authorino severity

   Published 2025-06-09

   Medium·CVSS 5.7 EPSS 0.28%

   The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authorino allows the users with developer persona to add callbacks to be executed to HTTP endpoints once the authorization process is completed. It was found that an a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.