PT-2026-77239

Name of the Vulnerable Software and Affected Versions submariner-operator affected versions not specified Description A flaw in the submariner-operator component involves the submariner-k8s-broker-cluster Role assigned to joined clusters, which possesses excessive permissions. This allows a...

PT-2026-77225

Name of the Vulnerable Software and Affected Versions Submariner operator affected versions not specified Description A flaw exists in the Submariner operator where the Submariner Custom Resource CR, used for network connectivity configuration, stores the IPsec pre-shared key PSK in an unencrypte...

GO-2024-2866 Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator

Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator...

Privilege Escalation

github.com/submariner-io/submariner-operator is vulnerable to Privilege Escalation. The vulnerability is due to unnecessary role-based access control permissions, which allows a privileged attacker to run a malicious container on a node, potentially stealing service account tokens and compromisin...

Submariner Operator 安全漏洞

Submariner Operator is a Submariner open source for installing Submariner components on Kubernetes clusters. A security vulnerability exists in Submariner Operator, which stems from unnecessary role-based access control privileges that allow a privileged attacker to steal service account tokens a...

PT-2024-4564

Name of the Vulnerable Software and Affected Versions: Submariner Operator affected versions not specified Description: A flaw was found in the Submariner project due to unnecessary role-based access control permissions. This allows a privileged attacker to run a malicious container on a node,...