Katanemo Plano: Missing authentication on Envoy admin interface exposes API keys

Summary

Katanemo Plano through version 0.4.37 exposes the Envoy admin interface on port 9901 on all host interfaces without authentication. An unauthenticated network attacker can request the /config_dump endpoint and read configured LLM provider API keys in plaintext. The attack requires only network access to port 9901 and no user interaction.

Affected

• Katanemo Plano 0.4.37 and earlier (through 0.4.37)
• Envoy admin interface on port 9901, bound to all host interfaces

Fixed in

Unknown. The vendor has not confirmed a fixed version. One aggregator names 0.4.38 or later, but this is not verified by the vendor.

Workaround

• Restrict port 9901 to trusted management networks using firewall rules or security groups
• Bind the Envoy admin listener to 127.0.0.1 only, and verify that the generated configuration applies this
• If exposure was possible, rotate the LLM provider API keys

Exploitation

• Public proof-of-concept: none found
• Known exploitation in the wild: no evidence found
• CISA SSVC: exploitation poc, automatable yes, technical impact partial

Our recommendation

• Check whether any Plano instance runs version 0.4.37 or earlier
• Confirm that port 9901 is not reachable from outside the host or from untrusted networks
• Restrict access to port 9901 and bind the admin interface to localhost where possible
• Rotate LLM provider API keys if the admin port was reachable
• Monitor access to port 9901 and plan the upgrade once the vendor confirms a fixed release

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• Katanemo Plano GitHub repository github.com
• VulnCheck advisory: Katanemo Plano missing authentication on Envoy admin interface www.vulncheck.com
• Plano config_generator.py at 0.4.37 github.com
• Plano envoy.template.yaml at 0.4.37 github.com
• VulDB entry VDB-416675 vuldb.com
• VulDB CVE-2026-108863 vuldb.com
• OSV CVE-2026-108863 osv.dev
• Plano release 0.4.38 github.com

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 05:02.