CyberRota Analysis
AI-GeneratedThe dataplane token validator in kuma-cp is vulnerable due to an unchecked Go type assertion on the JWT kid header, which can lead to a runtime panic if a malformed token is used. This vulnerability causes the entire kuma-cp process to terminate, impacting the HTTP API and health endpoints, although sustained outages require repeated requests. Organizations using kuma-cp should prioritize addressing this issue to prevent potential service disruptions from unauthenticated access attempts.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JWT kid header. A token whose kid is a JSON number decodes as a float64 and triggers a runtime panic before any signature, claims, or authorization check runs. The panic terminates the entire kuma-cp process, HTTP API, the health and readiness endpoints, and xDS. Unauthenticated access to the dataplane gRPC server can trigger the crash with a malformed token A single request is a transient interruption; sustaining an outage requires repeated requests.