Katanemo vulnerabilities
We track 1 vulnerability in Katanemo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Katanemo vulnerabilities
- 7.5 High severity
Plano: Missing Authentication for Critical Functionality
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /config_dump endpoint