CVE-2026-110724
Description
A flaw was found in api-gateway. The gateway's default client IP resolver uses client-supplied X-Forwarded-For HTTP request headers to track request limits without validating them against trusted proxies. A remote attacker can exploit this issue by submitting requests with modified header values to assign traffic to new tracking buckets. This allows the attacker to completely bypass request-rate limiting controls and potentially overwhelm backend services.
Statement
This vulnerability is rated as Moderate impact because an unauthenticated remote attacker can circumvent request rate limiting to cause service degradation on backend infrastructure, but cannot directly compromise confidentiality or achieve code execution. Furthermore, the affected Eclipse Connected Services Platform api-gateway component is not shipped or maintained within supported Red Hat product lines. Consequently, standard Red Hat enterprise deployments remain unaffected by this issue.
Understanding the Weakness (CWE)
Confidentiality,Access Control,Availability
Technical Impact: Bypass Protection Mechanism; Gain Privileges or Assume Identity; Varies by Context
When security decisions such as authentication and authorization are made based on the values of these inputs, attackers can bypass the security of the product to access whatever is being protected. An attacker could change these inputs using customized clients or other attacks. This change might not be detected. The consequences will depend on the associated functionality, but they can range from granting additional privileges to untrusted users to bypassing important security checks. Ultimately, this weakness may lead to exposure or modification of sensitive data, system crash, or execution of arbitrary code.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
