CVE-2025-14269

CVE-2025-14269 Se descubrió un problema de seguridad en la versión dentro del clúster de Headlamp donde usuarios no autenticados pueden reutilizar credenciales en caché para acceder a la funcionalidad de Helm a través de la interfaz de usuario de Headlamp. Los clústeres de Kubernetes solo se ven...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: zot, tigera-operator, chainctl, atmos, crossplane-cli, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf,...

GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: zot, tigera-operator, chainctl, atmos, crossplane-cli, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf,...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher, newrelic-infrastructure-agent, kube-arangodb, k9s, xeol, scorecard, zarf, docker-cli-buildx, kaniko, gatekeeper, falco-no-driver, helm-push, rancher-agent, headlamp, helm-operator, tigera-operator, zot, k8sgpt, trivy-operator, helm-set-status,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: tigera-operator, kots, xeol, tigera-operator-fips, maru, trivy-fips, drone, kube-arangodb, helm-set-status, cert-manager-cmctl-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf, cert-manager-cmctl, gitlab-operator, teleport, trivy, chartmuseum-fips,...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: chartmuseum, envoy-gateway, flux, helm-docs, k9s, zarf, helm-push, pluto, headlamp, helm-operator, cilium-cli, zot, flux-helm-controller, k8sgpt, nova, trivy-operator, linkerd2, helm-set-status, cluster-api-helm-controller, flux-source-controller, rancher-fleet,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, docker-cli-buildx, fzf, rancher-system-upgrade-controller, wal-g, mongo-tools, libnvidia-container, headlamp, mockgen, cilium-cli, ipfs-cluster, cis-operator, nri-mysql, aactl, gobuster, gobump, step-kms-plugin, lazydocker,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: zot, tigera-operator, chainctl, kots, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf, ctop, teleport,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: zot, tigera-operator, chainctl, kots, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf, ctop, teleport,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: chartmuseum, envoy-gateway, rancher, newrelic-infrastructure-agent, kube-arangodb, k9s, tw, xeol, scorecard, zarf, docker-cli-buildx, teleport, consul-k8s, kaniko, gatekeeper, falco-no-driver, helm-push, rancher-agent, headlamp, helm-operator, helm, tigera-operator,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: zot, tigera-operator, chainctl, kots, opa-envoy, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, k9s-fips, cluster-api-helm-controller, zarf, ctop,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: envoy-gateway, argo-cd, rancher, juicefs-csi-driver, terraform-provider-kubernetes, postgres-operator, kube-arangodb, k9s, infinispan-operator, zarf, docker-cli-buildx, teleport, consul-k8s, cert-manager-istio-csr, argocd-image-updater, rancher-agent, headlamp, helm,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: envoy-gateway, argo-cd, rancher, juicefs-csi-driver, terraform-provider-kubernetes, postgres-operator, kube-arangodb, k9s, infinispan-operator, zarf, docker-cli-buildx, teleport, consul-k8s, cert-manager-istio-csr, argocd-image-updater, rancher-agent, headlamp, helm,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: chartmuseum, envoy-gateway, flux, helm-docs, kuma, kube-arangodb, k9s, tw, zarf, consul-k8s, helm-push, pluto, headlamp, helm-operator, helm, tigera-operator, cilium-cli, zot, nova, trivy-operator, linkerd2, helm-set-status, cluster-api-helm-controller, harbor,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: chartmuseum, envoy-gateway, flux, helm-docs, kuma, kube-arangodb, k9s, tw, zarf, consul-k8s, helm-push, pluto, headlamp, helm-operator, helm, tigera-operator, cilium-cli, zot, nova, trivy-operator, linkerd2, helm-set-status, cluster-api-helm-controller, harbor,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, helm, kubescape-server-fips, zot, cloudbeat-fips, cloudbeat, flux, tigera-operator, tw, eksctl, trivy-operator-fips, cerbos, k8ssandra-client-fips, trivy-operator, k9s, kots, cilium-cli, consul-k8s-fips, helm-exporter-fips,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: argo-cd, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-memorydb, newrelic-infrastructure-agent, temporal, gitlab-pages, kubo, rabbitmq-cluster-operator, redpanda, docker-cli-buildx, kubernetes-csi-external-resizer, kaniko, sftpgo-plugin-kms,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, go-sqlcmd, cadvisor-fips, crossplane-provider-aws-acm, datadog-operator-fips, bank-vaults, tekton-pipelines, node-problem-detector-fips, crossplane-provider-aws-firehose-fips, sftpgo-plugin-pubsub, chainctl, cluster-api-aws-controller-fips, k9s,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, go-sqlcmd, cadvisor-fips, crossplane-provider-aws-acm, datadog-operator-fips, bank-vaults, tekton-pipelines, node-problem-detector-fips, crossplane-provider-aws-firehose-fips, sftpgo-plugin-pubsub, chainctl, cluster-api-aws-controller-fips, k9s,...

The vulnerability of the user interface of the Headlamp software for controlling clusters of virtual machines in Kubernetes allows a hacker to execute arbitrary commands.

The vulnerability of the user interface of the Headlamp software for controlling clusters of virtual machines in Kubernetes is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows an attacker to execute...