An interpretation conflict exists due to a path normalization mismatch between routing and upstream forwarding. This allows an unauthenticated client to bypass route-level authentication plugins and reach protected upstream paths if a route without authentication exists on the same upstream and the upstream does not collapse encoded dot segments.