82 matches found
SUSE CVE-2026-32241
Flannel is a network fabric for containers, designed for Kubernetes. The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types. In versions of Flannel prior to 0.28.2, this Extension backend is vulnerable to a command injection that...
Flannel vulnerable to cross-node remote code execution via extension backend BackendData injection
...
CVE-2026-32241
Flannel is a network fabric for containers, designed for Kubernetes. The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types. In versions of Flannel prior to 0.28.2, this Extension backend is vulnerable to a command injection that...
EUVD-2026-16771
Flannel has cross-node remote code execution via extension backend BackendData injection...
GHSA-VCHX-5PR6-FFX2 Flannel has cross-node remote code execution via extension backend BackendData injection
Background The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types. This backend uses shell commands stored in Kubernetes annotations to configure network connectivity on the node. Note: consumers are only affected by this vulnerabili...
CVE-2026-32241
Flannel is a network fabric for containers, designed for Kubernetes. The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types. In versions of Flannel prior to 0.28.2, this Extension backend is vulnerable to a command injection that...
CVE-2026-32241 Flannel vulnerable to cross-node remote code execution via extension backend BackendData injection
Flannel is a network fabric for containers, designed for Kubernetes. The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types. In versions of Flannel prior to 0.28.2, this Extension backend is vulnerable to a command injection that...
CVE-2026-32241
Flannel is a network fabric for containers, designed for Kubernetes. The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types. In versions of Flannel prior to 0.28.2, this Extension backend is vulnerable to a command injection that...
CVE-2026-32241 Flannel vulnerable to cross-node remote code execution via extension backend BackendData injection
Flannel is a network fabric for containers, designed for Kubernetes. The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types. In versions of Flannel prior to 0.28.2, this Extension backend is vulnerable to a command injection that...
CVE-2026-32241
CVE-2026-32241 – Flannel extension backend command injection . The vulnerability affects Flannel prior to v0.28.2 when using the experimental Extension backend. The SubnetAddCommand and SubnetRemoveCommand take attacker-controlled data from the Kubernetes Node annotation flannel.alpha.coreos.com/...
CVE-2026-32241 Flannel vulnerable to cross-node remote code execution via extension backend BackendData injection
Flannel is a network fabric for containers, designed for Kubernetes. The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types. In versions of Flannel prior to 0.28.2, this Extension backend is vulnerable to a command injection that...
flannel 命令注入漏洞
Flannel is an open-source Kubernetes cluster networking solution developed by flannel-io. Versions of Flannel prior to 0.28.2 contained a command injection vulnerability. This vulnerability originated from the experimental Extension backend. Attackers could exploit this vulnerability by setting u...
PT-2026-28434
Name of the Vulnerable Software and Affected Versions Flannel versions prior to 0.28.2 Description Flannel, a network fabric for containers designed for Kubernetes, contains a command injection issue in its experimental Extension backend. An attacker who can set Kubernetes Node annotations can...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: lvm-driver, harbor-registry-fips, spicedb-fips, crossplane-provider-aws-firehose, mcp-grafana, cloud-provider-gcp-cloud-controller-manager-fips, terraform-provider-random-fips, rancher-fleet-fips, blob-csi, prometheus-node-exporter-fips, crossplane-provider-aws-sns,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: amazon-k8s-cni, lvm-driver, node-feature-discovery, harbor-registry-fips, spicedb-fips, crossplane-provider-aws-firehose, mcp-grafana, cloud-provider-gcp-cloud-controller-manager-fips, nats, addon-resizer, rancher-fleet-fips, supercronic,...
Security update for flannel (important)
openSUSE Security Update: Security update for flannel Announcement ID: openSUSE-SU-2025:0491-1 Rating: important References: 1218694 1236522 1240516 Cross-References: CVE-2019-14697 CVE-2023-45288 CVE-2025-30204 CVSS scores: CVE-2023-45288 SUSE: 6.9...
CVE-2025-65637 affecting package flannel for versions less than 0.24.2-22
CVE-2025-65637 affecting package flannel for versions less than 0.24.2-22. A patched version of the package is available...
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27. A patched version of the package is available...
Security update for flannel (important)
openSUSE Security Update: Security update for flannel Announcement ID: openSUSE-SU-2025:0474-1 Rating: important References: 1218694 1236522 1240516 Cross-References: CVE-2019-14697 CVE-2023-45288 CVE-2025-30204 CVSS scores: CVE-2023-45288 SUSE: 6.9...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: nri-f5, kubernetes-dashboard-metrics-scraper, gobump, cis-operator, argocd-image-updater, polaris, pulumi-language-dotnet, hydra, ingress-nginx-controller, hcloud, gitlab-kas, kserve, podman, pluto, nri-consul, q, fuse-overlayfs-snapshotter, sftpgo-plugin-eventstore,...