CVE-2026-18608

The vulnerability CVE-2026-18608 affects the Data Science Pipelines Operator (DSPO). Its ClusterRole grants excessive privileges beyond what is needed, including pods/exec and cluster-wide role/binding control. If a DSPO pod is compromised, an attacker could leverage these permissions to achieve ...

PT-2024-29587 · Kubean · Kubean

Name of the Vulnerable Software and Affected Versions: Kubean versions prior to 0.18.0 Description: The issue concerns a cluster lifecycle management toolchain where the ClusterRole has excessive permissions, allowing a malicious user to abuse these permissions and perform any action on the whole...