CVE-2026-115539

The SwarmKit Cluster-API proxy is vulnerable to a privilege escalation flaw when built with grpc-go 1.39 or later . The WithMetadataForwardTLSInfo function incorrectly replaces outgoing metadata with a copy of incoming metadata, discarding redirect guard changes. During a brief window following a...