EUVD-2026-81053
GHSA-467c-wf8v-3rh9
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network request with a trivially malformed Cookie (PR:N/AC:L); bypassing the rate control is I:L and the resulting backend cost/exhaustion is A:L, with no confidentiality impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed thresholds intended to restrict costly model backend calls.
AnalysisAI
Higress gateways running the ai-token-ratelimit WASM plugin before version 2.2.4 allow unauthenticated remote clients to bypass AI token rate limiting by sending a Cookie header containing a segment without an equals sign; the resulting Go panic is recovered by the plugin wrapper, which then fails open and returns a continue action instead of blocking the request. The flaw is a fail-open control bypass rather than a confidentiality or code-execution issue: CVSS 4.0 scores it 6.9 (and the independent 3.1 assessment scores AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L), because the only impact is that costly model backend calls can exceed configured thresholds, enabling cost and resource abuse, with no C or S impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the Higress ai-token-ratelimit WASM plugin to be enabled on a route (that is the feature whose check is bypassed); on gateways without this plugin configured there is no exposure. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a moderate-severity, fail-open control-bypass flaw, not a top-tier emergency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to Higress 2.2.4 or later - the vendor-released patch is version 2.2.4, and the specific change is visible by diffing plugins/wasm-go/extensions/ai-token-ratelimit/util/utils.go (lines 52-63) between tag v2.2.3 (vulnerable, https://github.com/higress-group/higress/blob/v2.2.3/plugins/wasm-go/extensions/ai-token-ratelimit/util/utils.go#L52-L63) and tag v2.2.4 (fixed, https://github.com/higress-group/higress/blob/v2.2.4/plugins/wasm-go/extensions/ai-token-ratelimit/util/utils.go#L52-L63); see also https://github.com/higress-group/higress/issues/4599. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and there
Critical certificate validation bypass in Go crypto/tls during session resumption. If ClientCAs or RootCAs fields are mu
net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization by
Casdoor through 4.4.0 exposes its instance-wide built-in JWT signing private key unmasked through the /api/get-certs and
The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import pa
The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allow
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection. Rated high severity (CVS
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command executi
Denial of service in Go's net/url package allows remote unauthenticated attackers to crash applications via malformed UR
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query p
Share
External POC / Exploit Code
Leaving vuln.today