CVE-2026-54246

Name of the Vulnerable Software and Affected Versions Skipper (affected versions not specified)

Description The routesrv component exposes sensitive cluster-wide routing and cache infrastructure data over plain HTTP without any authentication. This allows any pod within the Kubernetes cluster to retrieve the full cluster route topology, including Ingress and RouteGroup configurations, backend URLs, filter chains, and OAuth/OIDC callback paths. Additionally, the internal IP and port pairs for Redis and Valkey cache cluster shards are exposed. This exposure enables an attacker who has compromised a pod with limited permissions to bypass Kubernetes RBAC and perform cluster-wide reconnaissance or direct cache-level attacks, such as session data exfiltration or ratelimit manipulation.