AIKIDO-2026-10525

TL;DR

Improper neutralization of user-controlled input in Contour Cookie Rewriting functionality allowed Lua code injection via HTTPProxy resource fields used for cookie path rewriting. An attacker with RBAC permissions to create or modify HTTPProxy objects could inject arbitrary Lua code executed by the shared Envoy Proxy instance when traffic reached the attacker-controlled route. Successful exploitation could enable arbitrary code execution within Envoy, disclosure of xDS credentials and other tenants’ TLS certificates or private keys, and denial of service affecting co-hosted tenants.