CVE-2026-62440 Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

CVE-2026-62440

CVE-2026-62440 is an Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin . It allows cross-tenant manipulation of a Kubernetes cluster during node add/remove operations, meaning one tenant can affect another tenant's cluster. Affected versions are 4.21.0.0...