{}

{}

{}

{"bugzilla": {"description": "contour: Contour: JWT verification bypass allows unauthorized access via HTTPProxy misconfiguration", "id": "2499692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499692"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "status": "draft"}, "cwe": "CWE-295", "details": ["A flaw was found in Contour. When an HTTPProxy is configured with both a fallback certificate and JWT (JSON Web Token) providers, Contour does not properly enforce JWT verification. This allows remote attackers to bypass security checks by sending requests without a valid token, specifically when clients do not provide a TLS Server Name Indication (SNI) or provide an unrecognized SNI. The consequence is unauthorized access to upstream services and potential information disclosure."], "mitigation": {"lang": "en:us", "value": "Upgrade to Contour v1.33.5 or later. As a workaround, do not enable enableFallbackCertificate on HTTPProxy resources that also define jwtProviders."}, "name": "CVE-2026-50149", "public_date": "2026-07-02T17:15:20Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-50149\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-50149\nhttps://github.com/projectcontour/contour/security/advisories/GHSA-g3xr-5w5j-w4q4"], "statement": "A flaw was found in Contour. When an HTTPProxy combines enableFallbackCertificate with jwtProviders, requests without TLS SNI bypass JWT verification and are proxied without a valid token.", "threat_severity": "Moderate"}

{}