CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: victoriametrics, karpenter, grafana-operator, aws-load-balancer-controller, sftpgo-plugin-eventsearch, supercronic-fips, polaris, flux-image-reflector-controller, external-secrets-operator-fips, go, nginx-kubernetes-ingress-fips, dkron, cilium-certgen-fips, flux,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: chartmuseum, gatekeeper-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, kargo, redka, seaweedfs, kpt, gomplate, knative-eventing-fips, libnvidia-container, extism, azuredisk-csi-fips, gitness, amazon-ssm-agent-fips, docker-cli-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: chartmuseum, gatekeeper-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, kargo, redka, seaweedfs, kpt, gomplate, knative-eventing-fips, libnvidia-container, extism, azuredisk-csi-fips, gitness, amazon-ssm-agent-fips, docker-cli-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, gatekeeper-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, terraform-provider-tls-fips, kargo, redka, crossplane-provider-keycloak, request-1279, seaweedfs, kpt, plugin-barman-cloud, gomplate,...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, gatekeeper-fips, timestamp-authority-fips, fuse-overlayfs-snapshotter, karpenter, kuberlr, azurefile-csi, cilium, trivy-fips, kubevirt-cdi-controller-fips, aws-sigv4-proxy, kargo, local-static-provisioner, terraform-provider-tls-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, gatekeeper-fips, timestamp-authority-fips, fuse-overlayfs-snapshotter, karpenter, kuberlr, azurefile-csi, cilium, trivy-fips, kubevirt-cdi-controller-fips, aws-sigv4-proxy, kargo, local-static-provisioner, terraform-provider-tls-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: chartmuseum, azurefile-csi, seaweedfs, kpt, postgres-operator-fips, chronyexporter, libnvidia-container, azuredisk-csi-fips, sftpgo-plugin-pubsub, terraform-ls, x509-certificate-exporter-fips, splunk-otel-collector, nri-nagios-fips, dataplaneapi-fips, neuvector,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, gatekeeper-fips, timestamp-authority-fips, fuse-overlayfs-snapshotter, karpenter, kuberlr, azurefile-csi, cilium, trivy-fips, kubevirt-cdi-controller-fips, aws-sigv4-proxy, kargo, local-static-provisioner, terraform-provider-tls-fips,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, gatekeeper-fips, timestamp-authority-fips, fuse-overlayfs-snapshotter, karpenter, kuberlr, azurefile-csi, cilium, trivy-fips, kubevirt-cdi-controller-fips, aws-sigv4-proxy, kargo, local-static-provisioner, terraform-provider-tls-fips,...

CVE-2026-39961

Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster. From 0.31.0 to before 0.37.0, a developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace — production database credentials, API keys...

Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource

Impact A developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace — production database credentials, API keys, service tokens — with a single kubectl apply. The operator reads the victim's secret using its ClusterRole and write...

EUVD-2026-20965

Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource...

GHSA-99J8-WV67-4C72 Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource

Impact A developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace — production database credentials, API keys, service tokens — with a single kubectl apply. The operator reads the victim's secret using its ClusterRole and write...

CVE-2026-35669

OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in gateway-authenticated plugin HTTP routes that incorrectly mint operator.admin runtime scope regardless of caller-granted scopes. Attackers can exploit this scope boundary bypass to gain elevated privileges and perform...

CVE-2026-35660

OpenClaw before 2026.3.23 contains an insufficient access control vulnerability in the Gateway agent /reset endpoint that allows callers with operator.write permission to reset admin sessions. Attackers with operator.write privileges can invoke /reset or /new messages with an explicit sessionKey ...

CVE-2026-35657

OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in the HTTP /sessions/:sessionKey/history route that skips operator.read scope validation. Attackers can access session history without proper operator read permissions by sending HTTP requests to the vulnerable endpoint...

CVE-2026-35621

OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command fails to re-validate gateway client scopes for internal callers, allowing operator.write-scoped clients to mutate channel authorization policy. Attackers can exploit chat.send to build an internal...

CVE-2026-35619

OpenClaw before 2026.3.24 contains an authorization bypass vulnerability in the HTTP /v1/models endpoint that fails to enforce operator read scope requirements. Attackers with only operator.approvals scope can enumerate gateway model metadata through the HTTP compatibility route, bypassing the...

CVE-2026-35620

OpenClaw before 2026.3.24 contains missing authorization vulnerabilities in the /send and /allowlist chat command handlers. The /send command allows non-owner command-authorized senders to change owner-only session delivery policy settings, and the /allowlist mutating commands fail to enforce...

CVE-2026-35669

OpenClaw is affected prior to version 2026.3.25. The vulnerability resides in the gateway-authenticated plugin HTTP routes, where the system incorrectly mints operator.admin runtime scope regardless of caller-granted scopes. This scope boundary bypass can allow an attacker to escalate privileges ...