Skip to content
OpenAdvisories

Vendor

warp-tech

14 known vulnerabilities.

Products

warpgate 13 russh 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-91163

    Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller

    Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/client_certs.rs to accept certificates at the TLS layer and defer va…

    warp-tech warpgate
  • Low 2.4
    CVE-2026-91165

    Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values

    Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.27.6, the response_mode=form_post SSO return path in warpgate-protocol-http/src/api/sso_provider_list.rs uses serde_json::to_string inside ReturnToSsoPostResponse without neutr…

    warp-tech warpgate