CVE-2026-24470

CVE-2026-24470 affects Zalando Skipper, an HTTP router and reverse proxy, specifically versions prior to 0.24.0. The vulnerability allows authenticated users with specific Kubernetes permissions to create routes that grant Skipper network access to internal services, potentially bypassing network segmentation. With a CVSS score of 8.1 (HIGH), this vulnerability has a network attack vector, low attack complexity, and can lead to high confidentiality and integrity impacts. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.