CVE-2026-92790 — Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Header
Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI t…
Published: 2026-09-16 · CVSS: 6.9 · CVSS 4.0
Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed thresholds intended to restrict costly model backend calls.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7