CVE-2026-54495

🗓️ 15 Jul 2026 22:44:48Reported by candidateType

cve👁 10 Views

CVE-2026-54495 is not just a reserved placeholder; the related GHSA advisory describes a vulnerability in the OpenFeature Open Feature Operator where cross-namespace resolution of a FeatureFlagSource or InProcessConfiguration can lead to tenant-to...

Reporter	Title	Published	Views	Family All 4
Github Security Blog	open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters	15 Jul 202622:44	–	github
OSV	GHSA-398H-7F66-3H4P open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters	15 Jul 202622:44	–	osv
OSV	GO-2026-5998 open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters in github.com/open-feature/open-feature-operator	17 Jul 202619:42	–	osv
Positive Technologies	PT-2026-60387	15 Jul 202600:00	–	ptsecurity

Source	Link
github	www.github.com/advisories/GHSA-398h-7f66-3h4p
github	www.github.com/open-feature/open-feature-operator
github	www.github.com/open-feature/open-feature-operator/issues/847
github	www.github.com/open-feature/open-feature-operator/security/advisories/GHSA-398h-7f66-3h4p
osv	www.osv.dev/vulnerability/GHSA-398h-7f66-3h4p

15 Jul 2026 22:44Current