CVE-2026-50197 | zalando skipper up to 0.26.9 OpenPolicyAgent Integration openpolicyagent.go opaAuthorizeRequestWithBody improper authorization

July 17, 2026 Yanac

A vulnerability classified as critical was found in zalando skipper up to 0.26.9. The affected element is the function opaAuthorizeRequestWithBody of the file filters/openpolicyagent/openpolicyagent.go of the component OpenPolicyAgent Integration. Such manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-50197. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More