{"id":"CVE-2026-92790","title":"Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting","summary":"Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a ma…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-703"],"vendor":"higress-group","product":"higress","affected":["higress < 2.2.4"],"published":"2026-09-16","updated":"2026-09-24","sourceUpdated":"2026-09-24T20:48:01.433","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92790","references":[{"url":"https://github.com/higress-group/higress","label":"disclosure@vulncheck.com"},{"url":"https://github.com/higress-group/higress/blob/v2.2.3/plugins/wasm-go/extensions/ai-token-ratelimit/util/utils.go#L52-L63","label":"disclosure@vulncheck.com"},{"url":"https://github.com/higress-group/higress/blob/v2.2.4/plugins/wasm-go/extensions/ai-token-ratelimit/util/utils.go#L52-L63","label":"disclosure@vulncheck.com"},{"url":"https://github.com/higress-group/higress/issues/4599","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/higress-before-2.2.4-rate-limit-bypass-via-malformed-cookie-header","label":"disclosure@vulncheck.com"},{"url":"https://github.com/higress-group/higress/issues/4599","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00517,"epssPercentile":0.4145,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-17T15:03:59.793001Z"},"ingestedAt":"2026-09-16T21:05:36.887Z","slug":"CVE-2026-92790","body":"## Overview\n\nHigress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed thresholds intended to restrict costly model backend calls.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":206265,"id":"CVE-2026-92790","ts":1789662164856,"field":"exploit_available","old":"false","new":"true"}]}