CVE-2026-73666

creationtimestamp| type| source ---|---|--- 2026-08-13 23:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msyqqjkxsx2b...

CVE-2026-73666

OpenChoreo is a developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.1, the OpenChoreo Backstage backend hardcoded backend.auth.dangerouslyDisableDefaultAuthPolicy and auth.providers.guest.dangerouslyAllowOutsideDevelopment to true, exposing /api/ without authentication and allowing...