The Kuadrant operator includes an internal WebAssembly shim that constructs a CEL predicate to enforce gateway‑level authentication and rate limiting. A flaw in the shim causes it to fail to correctly escape values supplied in HTTPRoute match fields, allowing an attacker who can create or modify an HTTPRoute attached to a shared Gateway to inject crafted path, header or query values that cause the predicate to skip the policy checks. The request is still forwarded to the route’s backend, effectively bypassing authentication and rate limiting controls. This flaw can be classified as a source‑injection weakness, CWE‑917.

This vulnerability affects the Kuadrant operator that is part of Red Hat’s Connectivity Link 1 and Red Hat OpenShift AI (RHOAI) offerings. The flaw is present in any version of these products that includes the WebAssembly shim; no specific minor patch numbers are listed, so all currently distributed releases should be considered affected until a fix is released.

The CVSS base score of 7.4 indicates a high severity, and the exploit probability is not quantified by EPSS. The fault does not require network‑level or zero‑day exploits; it can be triggered simply by creating or modifying an HTTPRoute that the attacker has permission to manage. Provided the operator is running in a cluster with a shared Gateway, an attacker can bypass security controls and send arbitrary requests to the backend services. Since the flaw is not listed in CISA’s KEV catalog, there are no publicly documented exploitation campaigns yet, but the high CVSS and the direct impact on gateway enforcement make the vulnerability a top priority for operators.