CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the Konnectivity proxy-server configuration for hosted control planes, where the agent-facing listener lacks proper client certificate validation due to missing authentication mechanisms. This flaw allows remote attackers to connect as unauthenticated agents, enabling them to proxy, inspect, modify, or disrupt control-plane-to-node traffic. Organizations using Konnectivity should prioritize remediation to prevent potential unauthorized access and manipulation of sensitive data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.