PT-2026-4831 · Kipper · Kipper
B0B0Haha
·
Published
2026-01-26
·
Updated
2026-02-18
·
CVE-2026-24470
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Skipper versions prior to 0.24.0
Description
Skipper is an HTTP router and reverse proxy for service composition. When operating as an Ingress controller, users with the ability to create Ingress resources and Services of type ExternalName can establish routes that leverage Skipper’s network access to reach internal services. This can potentially allow unauthorized access to internal services. The issue arises from the handling of Kubernetes ExternalName services.
Recommendations
Update to version 0.24.0 or later.
As a workaround, use the
-kubernetes-only-allowed-external-names=true flag.
As a workaround, allow list targets of an ExternalName using regular expressions with the -kubernetes-allowed-external-name '^[a-z][a-z0-9-.]+[.].allowed.example$' flag.Exploit
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Kipper