CVE-2026-102340

Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager gRPC API on port 8081 accepts unauthenticated cluster-network callers, ArriveAsClient stores a caller-supplied Namespace using only the ManagesNamespace manager watchlist...

CVE-2026-102340

Prior to version 2.31.0 , Telepresence is vulnerable to an authentication and authorization bypass in its Traffic Manager gRPC API (port 8081). The flaw allows unauthenticated cluster-network callers to provide an arbitrary Namespace via ArriveAsClient and target any managed namespace using Creat...

CVE-2026-102340 Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets

Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager gRPC API on port 8081 accepts unauthenticated cluster-network callers, ArriveAsClient stores a caller-supplied Namespace using only the ManagesNamespace manager watchlist...