CVE-2026-91163

Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/client_certs.rs to accept certificates at the TLS layer and defer validation to warpgate-protocol-kubernetes/src/server/auth.rs, where authentication and lookup failures are rendered verbatim in an HTTP 500 response body. The Kubernetes application in warpgate-protocol-kubernetes/src/server/mod.rs lacks the outer request-logging wrapper used by the HTTP protocol, and failures in warpgate-protocol-kubernetes/src/server/handlers.rs can short-circuit before its inner log point. An unauthenticated network client can therefore induce failures and receive ASN.1/DER parser diagnostics or sea_orm database errors without the attempt being recorded in the gateway log. The disclosed information is limited to internal diagnostics, and no user-data, integrity, or availability impact is established. This issue is fixed in version 0.29.0.

• CWE-209
• CWE-532

• https://github.com/warp-tech/warpgate/commit/8426196a27c30fca521656653f9df1faf3df7523
• https://github.com/warp-tech/warpgate/pull/2547
• https://github.com/warp-tech/warpgate/releases/tag/v0.29.0
• https://github.com/warp-tech/warpgate/security/advisories/GHSA-hrfx-fm67-gv64

Published

Nov 4, 2026

Last Modified

Nov 4, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-91156Discourse is an open-source discussion platform. Prior to 20…7.5
• CVE-2026-91157Discourse is an open-source discussion platform. Prior to 20…7.5
• CVE-2026-91159Discourse is an open-source discussion platform. Prior to 20…7.7
• CVE-2026-9116Insufficient policy enforcement in ServiceWorker in Google C…4.3
• CVE-2026-91160OpenWA is a free, open source, self-hosted WhatsApp API gate…8.2
• CVE-2026-91161OpenWA is a free, open source, self-hosted WhatsApp API gate…6.4
• CVE-2026-91164Warpgate is an open source SSH, HTTPS and MySQL bastion host…4.3
• CVE-2026-91165Warpgate is an open source SSH, HTTPS and MySQL bastion host…2.4
• CVE-2026-91166Warpgate is an open source SSH, HTTPS and MySQL bastion host…5.7
• CVE-2026-91167Warpgate is an open source SSH, HTTPS and MySQL bastion host…6
• CVE-2026-91168Warpgate is an open source SSH, HTTPS, and MySQL bastion hos…6.8
• CVE-2026-9117Type Confusion in GFX in Google Chrome on Linux, ChromeOS pr…7.5