CVE-2026-53487

Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request "/api/v1/overview" for a cluster that their roles do not permit by selecting that cluster with "x-cluster-name". The overview route is registered before "middleware.RBACMiddleware" and...