CVE-2026-86043 | Zalando Skipper up to 0.27.36 opaAuthorizeRequestWithBody Filter openpolicyagent.go improper authorization

September 16, 2026 Yanac

A vulnerability classified as problematic has been found in Zalando Skipper up to 0.27.36. The impacted element is the function opaAuthorizeRequestWithBody of the file filters/openpolicyagent/openpolicyagent.go of the component opaAuthorizeRequestWithBody Filter. Performing a manipulation results in improper authorization.

This vulnerability was named CVE-2026-86043. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More