TI-2026-62531 CVE-2026-92790 · GHSA-467c-wf8v-3rh9
Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Header
Priority HIGH 70
Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting.