KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes

Description KubeEdge ConfigUpdateJob processing was vulnerable to command injection on edge nodes. The updateFields values from a ConfigUpdateJob were concatenated into a command string and executed through a system shell. An authenticated user with sufficient permissions to create or update...

EUVD-2026-84032

KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes...

CVE-2026-62182

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.21.0 until 1.21.2, 1.22.2, and 1.23.1, ConfigUpdateJob processing in edge/pkg/taskmanager/actions/configupdatejob.go concatenates authenticated user-controlled...