EUVD-2026-60199

A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identity of these ServiceAccounts, either through a remote code...

GO-2026-5289 Istio: AuthorizationPolicy serviceAccounts regex injection via unescaped dots in istio.io/istio

Istio: AuthorizationPolicy serviceAccounts regex injection via unescaped dots in istio.io/istio...

CVE-2026-39350

CVE-2026-39350 (Istio) : The vulnerability affects Istio AuthorizationPolicy fields serviceAccounts and notServiceAccounts, where a dot (.) is incorrectly treated as a regular expression matcher. As a result, an ALLOW rule targeting a service account such as cert-manager.io can also match similar...