CVE-2026-115539

SwarmKit's Cluster-API proxy can overwrite a forwarded client's TLS identity with an intermediary manager's identity. WithMetadataForwardTLSInfo replaces outgoing metadata with a copy of the incoming metadata, discarding the redirect guard's changes when built with grpc-go 1.39 or later. During a...

PT-2026-144600

Name of the Vulnerable Software and Affected Versions SwarmKit versions prior to 2.1.3 Description The Cluster-API proxy can overwrite a forwarded client's TLS identity with the identity of an intermediary manager. This occurs because the WithMetadataForwardTLSInfo function replaces outgoing...